[Remote] Cloud Architect - Network (REMOTE)

Note: The job is a remote job and is open to candidates in USA. Koniag Data Solutions LLC, a Koniag Government Services company, is seeking an experienced Cloud Architect - Network to support secure, scalable, and highly available cloud-networking solutions for the Administration for Children and Families. The role involves designing and managing advanced AWS networking architectures and collaborating with security teams to implement network-security controls.

Responsibilities

• Design, implement, and manage advanced AWS networking architectures, including VPCs, Transit Gateways, Direct Connect, VPNs, PrivateLink, Route 53, Elastic Load Balancing, CloudFront, Global Accelerator, and related services
• Develop and maintain network architecture documentation, diagrams, technical standards, and configuration baselines to promote consistency, resilience, and compliance across cloud environments
• Collaborate with security teams to implement network-security controls, including security groups, network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, segmentation, secure ingress and egress, and Zero Trust-aligned controls
• Design and support PKI-enabled application and network capabilities for digital signatures, encryption, identification, authentication, and secure communications
• Plan and document physical and network-access requirements for security testing; define internal and external test-environment connectivity, segmentation, access paths, and safeguards
• Evaluate existing network infrastructure and provide recommendations for optimization, modernization, risk reduction, and migration to AWS cloud environments
• Lead the design and implementation of hybrid cloud-networking solutions that securely connect on-premises data centers and other external environments to AWS
• Work closely with DevOps and engineering teams to integrate network solutions into CI/CD pipelines and IaC frameworks using Terraform, AWS CloudFormation, AWS CDK, or equivalent tools
• Implement and maintain advanced monitoring, detection, and analysis capabilities for cybersecurity threats using network telemetry, VPC Flow Logs, CloudWatch, and other approved tools
• Monitor network performance, troubleshoot complex connectivity and security issues, and implement corrective actions to maintain service availability and reliability
• Participate in Red Team/Blue Team exercises by designing test environments, validating network controls, analyzing results, and implementing approved remediation actions
• Support compliance efforts by ensuring network designs adhere to FedRAMP, NIST SP 800-53, FISMA, and other applicable federal security requirements
• Operate in an Agile delivery environment while satisfying government project requirements, stage gates, and documentation expectations
• Provide technical leadership, mentorship, and guidance to junior cloud and network engineers
• Remain current on emerging AWS networking technologies, services, and industry practices to continually improve cloud-networking capabilities

Skills

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field from an accredited college or university
• 7+ years of experience in network engineering or architecture, with at least 4+ years focused on cloud networking in AWS environments
• AWS Certified Advanced Networking - Specialty certification
• Ability to obtain public trust
• Master's degree in a related field
• Experience supporting federal government IT programs and projects
• Experience working in a federal government IT environment
• Additional AWS certifications, such as AWS Certified Solutions Architect - Professional or AWS Certified Security - Specialty
• Experience with multi-cloud networking strategies involving Azure and/or Google Cloud Platform (GCP)
• Knowledge of Zero Trust network-architecture principles and implementation
• Experience with container networking in Kubernetes and Amazon EKS environments
• Familiarity with DevSecOps practices and integrating network-security controls into CI/CD pipelines
• Experience with network automation using Python, Ansible, or similar scripting and automation tools
• Experience supporting FedRAMP authorization processes, including preparation of System Security Plans (SSPs) and related documentation
• Experience participating in Red Team/Blue Team exercises or implementing network-control remediation based on exercise findings

Benefits

• Health, dental and vision insurance
• 401K with company matching
• Flexible spending accounts
• Paid holidays
• Three weeks paid time off
• And more

Company Overview