Note: The job is a remote job and is open to candidates in USA. Koniag Data Solutions LLC, a Koniag Government Services company, is seeking an experienced Cloud Architect - Network to support secure, scalable, and highly available cloud-networking solutions for the Administration for Children and Families. The role involves designing and managing advanced AWS networking architectures and collaborating with security teams to implement network-security controls.
Responsibilities
- Design, implement, and manage advanced AWS networking architectures, including VPCs, Transit Gateways, Direct Connect, VPNs, PrivateLink, Route 53, Elastic Load Balancing, CloudFront, Global Accelerator, and related services
- Develop and maintain network architecture documentation, diagrams, technical standards, and configuration baselines to promote consistency, resilience, and compliance across cloud environments
- Collaborate with security teams to implement network-security controls, including security groups, network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, segmentation, secure ingress and egress, and Zero Trust-aligned controls
- Design and support PKI-enabled application and network capabilities for digital signatures, encryption, identification, authentication, and secure communications
- Plan and document physical and network-access requirements for security testing; define internal and external test-environment connectivity, segmentation, access paths, and safeguards
- Evaluate existing network infrastructure and provide recommendations for optimization, modernization, risk reduction, and migration to AWS cloud environments
- Lead the design and implementation of hybrid cloud-networking solutions that securely connect on-premises data centers and other external environments to AWS
- Work closely with DevOps and engineering teams to integrate network solutions into CI/CD pipelines and IaC frameworks using Terraform, AWS CloudFormation, AWS CDK, or equivalent tools
- Implement and maintain advanced monitoring, detection, and analysis capabilities for cybersecurity threats using network telemetry, VPC Flow Logs, CloudWatch, and other approved tools
- Monitor network performance, troubleshoot complex connectivity and security issues, and implement corrective actions to maintain service availability and reliability
- Participate in Red Team/Blue Team exercises by designing test environments, validating network controls, analyzing results, and implementing approved remediation actions
- Support compliance efforts by ensuring network designs adhere to FedRAMP, NIST SP 800-53, FISMA, and other applicable federal security requirements
- Operate in an Agile delivery environment while satisfying government project requirements, stage gates, and documentation expectations
- Provide technical leadership, mentorship, and guidance to junior cloud and network engineers
- Remain current on emerging AWS networking technologies, services, and industry practices to continually improve cloud-networking capabilities
Skills
- Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field from an accredited college or university
- 7+ years of experience in network engineering or architecture, with at least 4+ years focused on cloud networking in AWS environments
- AWS Certified Advanced Networking - Specialty certification
- Ability to obtain public trust
- Master's degree in a related field
- Experience supporting federal government IT programs and projects
- Experience working in a federal government IT environment
- Additional AWS certifications, such as AWS Certified Solutions Architect - Professional or AWS Certified Security - Specialty
- Experience with multi-cloud networking strategies involving Azure and/or Google Cloud Platform (GCP)
- Knowledge of Zero Trust network-architecture principles and implementation
- Experience with container networking in Kubernetes and Amazon EKS environments
- Familiarity with DevSecOps practices and integrating network-security controls into CI/CD pipelines
- Experience with network automation using Python, Ansible, or similar scripting and automation tools
- Experience supporting FedRAMP authorization processes, including preparation of System Security Plans (SSPs) and related documentation
- Experience participating in Red Team/Blue Team exercises or implementing network-control remediation based on exercise findings
Benefits
- Health, dental and vision insurance
- 401K with company matching
- Flexible spending accounts
- Paid holidays
- Three weeks paid time off
- And more
Company Overview