Cloud Architect

Key Responsibilities

• Lead the design and development of cloud-based enterprise architectures supporting FEMA's IaaS, PaaS, and SaaS requirements, including FedRAMP High-authorized Commercial Cloud Brokers (CCBs).
• Develop and enhance FEMA's Cloud Architecture Repositories and technical insertion processes, ensuring alignment with enterprise target architectures per Section 4.2.1 of the SOO.
• Create and promote cloud architecture frameworks and models for FEMA adoption, supporting the reduction of IT complexity through reuse of existing solutions.
• Design architectures that incorporate Virtual Compute Services (VCS), Scaling Automation Services (SAS), containerization (Docker, Kubernetes), serverless compute, and managed database services (relational, NoSQL, Data Warehouse).
• Architect Private Virtual Cloud Networks (PVCNs), Virtual Load Balancing (VLB), Direct Connection Services (DCS), and hybrid network connectivity including DHS TIC 3.0 compliance and FEMA's hub-and-spoke model.
• Provide architectural guidance for key management (KMS/HSMs), Identity and Access Management (IAM), Infrastructure as Code (IaC), and Content Delivery Services (CDS).
• Support Enterprise Architecture alignment with FEMA's Strategic SELC processes and IT investment decision-making, including gap analysis of existing Disaster and Cloud architectures.
• Lead cloud architecture planning for Joint Field Offices (JFOs), COOP, and disaster recovery operational scenarios.
• Ensure all architectural designs meet FISMA High security categorization, NIST 800-53, FedRAMP JAB Full-ATO (High Impact Level), and DHS 4300A Sensitive Systems standards.
• Collaborate with FEMA's Data Governance Council to support data architecture activities and provide subject-matter expertise.
• Evaluate and recommend emerging cloud technologies, AI/ML platforms, and development platform capabilities (Python, .Net, Java, Node JS, etc.) for adoption within FEMA's cloud portfolio.
• Interface with Engineering teams, Program Managers, and FEMA OCIO leadership to ensure architectural solutions support mission-critical IT objectives.
• Support security engineering tasks including design of the FEMA Enterprise Security Stack (FESS), WAF configurations, Palo Alto VM-Series Next Generation Firewalls, and FEMA SOC visibility requirements.

Minimum Requirements

• At least seven (7) years of relevant experience.
• Deep expertise in cloud enterprise architecture design across AWS, Azure, and GCP, with strong knowledge of FedRAMP High, FISMA, and DHS compliance requirements.
• Strong proficiency in designing IaaS/PaaS services including virtual compute, auto-scaling, containerization (Docker, Kubernetes), serverless functions, managed databases, and multi-tier storage architectures.
• Expert-level knowledge of cloud networking, including VPCs, VPNs, Direct Connect/ExpressRoute, hybrid cloud connectivity, TIC 3.0, and hub-and-spoke network models.
• Experience with Infrastructure as Code (IaC) tools (Terraform, CloudFormation, Ansible) and CI/CD pipeline architectures.
• Strong understanding of Key Management Services (KMS), HSMs, Identity and Access Management (IAM), and multi-factor authentication standards.
• Knowledge of FEMA's SELC processes and federal enterprise architecture frameworks (TOGAF, DoDAF, or equivalent).
• Experience with cloud security tools such as Palo Alto firewalls, WAF, Splunk SIEM integration, McAfee, Tenable Nessus, and ForeScout.
• Excellent communication and stakeholder engagement skills; ability to brief senior government officials and translate complex architecture concepts for non-technical audiences.
• Familiarity with Section 508 accessibility requirements for ICT deliverables.

Education & Certification Requirements

• Bachelor's or Master's degree in Computer Science, Information Systems, Electrical Engineering, or a related technical field.
• AWS Certified Solutions Architect – Professional, Azure Solutions Architect Expert, or GCP Professional Cloud Architect.
• TOGAF certification preferred.
• FedRAMP or cloud security certifications (CCSP, CISSP) highly desirable.