Cloud Architect Network (REMOTE)

Koniag Data Solutions LLC a Koniag Government Services company is seeking a Cloud Architect - Network to support KDS and our government customer. The position is remote. This position requires the candidate to be able to obtain a Public offer competitive compensation and an extraordinary benefits package including health dental and vision insurance 401K with company matching flexible spending accounts paid holidays three weeks paid time off and Data Solutions LLC (KDS) a Koniag Government Services company is seeking an experienced Cloud Architect (Network) with an AWS Advanced Networking Specialty to support secure scalable and highly available cloud-networking solutions for the Administration for Children and Families (ACF) a U.S. Department of Health and Human Services component. The ideal candidate is a seasoned cloud-networking professional with deep expertise in AWS networking services hybrid connectivity Zero Trust architecture and federal security requirements. The Cloud Architect (Network) will perform a key technical role supporting ACF cloud modernization cybersecurity operational resilience and mission delivery. Principal responsibilities include but are not limited to:Design implement and manage advanced AWS networking architectures including VPCs Transit Gateways Direct Connect VPNs PrivateLink Route 53 Elastic Load Balancing CloudFront Global Accelerator and related and maintain network architecture documentation diagrams technical standards and configuration baselines to promote consistency resilience and compliance across cloud with security teams to implement network-security controls including security groups network ACLs AWS WAF AWS Shield AWS Network Firewall segmentation secure ingress and egress and Zero Trust-aligned and support PKI-enabled application and network capabilities for digital signatures encryption identification authentication and secure and document physical and network-access requirements for security testing; define internal and external test-environment connectivity segmentation access paths and existing network infrastructure and provide recommendations for optimization modernization risk reduction and migration to AWS cloud the design and implementation of hybrid cloud-networking solutions that securely connect on-premises data centers and other external environments to closely with DevOps and engineering teams to integrate network solutions into CI/CD pipelines and IaC frameworks using Terraform AWS CloudFormation AWS CDK or equivalent and maintain advanced monitoring detection and analysis capabilities for cybersecurity threats using network telemetry VPC Flow Logs CloudWatch and other approved network performance troubleshoot complex connectivity and security issues and implement corrective actions to maintain service availability and in Red Team/Blue Team exercises by designing test environments validating network controls analyzing results and implementing approved remediation compliance efforts by ensuring network designs adhere to FedRAMP NIST SP 800-53 FISMA and other applicable federal security in an Agile delivery environment while satisfying government project requirements stage gates and documentation technical leadership mentorship and guidance to junior cloud and network current on emerging AWS networking technologies services and industry practices to continually improve cloud-networking and ExperienceRequired:Bachelors degree in Computer Science Information Technology Network Engineering or a related field from an accredited college or university.7 years of experience in network engineering or architecture with at least 4 years focused on cloud networking in AWS Certified Advanced Networking - Specialty Requirement:Ability to obtain public trust Preferred:Masters degree in a related supporting federal government IT programs and Skills and CompetenciesExceptional written and oral communication skills in English with the ability to communicate complex technical concepts to technical and non-technical expertise in AWS networking services including VPC Transit Gateway Direct Connect AWS PrivateLink Route 53 Elastic Load Balancing CloudFront and AWS Global understanding of networking fundamentals including TCP/IP DNS BGP OSPF MPLS SD-WAN routing switching segmentation and network designing and implementing hybrid and multi-cloud network architectures connecting on-premises environments to with IaC tools such as Terraform AWS CloudFormation or AWS CDK for automating network provisioning and implementing network-security controls including AWS Security Groups Network ACLs AWS WAF AWS Shield AWS Network Firewall and secure network of PKI concepts and application of PKI-supported capabilities for authentication encryption identification and digital planning network-access and connectivity requirements for internal and external security-testing with federal security and compliance frameworks including FedRAMP NIST SP 800-53 FISMA and related with network monitoring threat analysis and performance management tools including AWS CloudWatch VPC Flow Logs and third-party monitoring to troubleshoot and resolve complex cloud-networking and network-security issues in production to work collaboratively provide technical leadership and mentorship and participate in Agile delivery Skills and CompetenciesExperience working in a federal government IT AWS certifications such as AWS Certified Solutions Architect - Professional or AWS Certified Security - with multi-cloud networking strategies involving Azure and/or Google Cloud Platform (GCP).Knowledge of Zero Trust network-architecture principles and with container networking in Kubernetes and Amazon EKS with DevSecOps practices and integrating network-security controls into CI/CD with network automation using Python Ansible or similar scripting and automation supporting FedRAMP authorization processes including preparation of System Security Plans (SSPs) and related participating in Red Team/Blue Team exercises or implementing network-control remediation based on exercise Equal Employment Opportunity PolicyThe company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race color religion creed ethnicity sex sexual orientation gender or gender identity (except where gender is a bona fide occupational qualification) national origin or ancestry age disability citizenship military/veteran status marital status genetic information or any other characteristic protected by applicable federal state or local law. We are committed to equal employment opportunity in all decisions related to employment promotion wages benefits and all other privileges terms and conditions of company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website please get in touch with Heaven Wood via e-mail by calling to request Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical professional and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers employees and native communities. For more information please Opportunity Employer/Veterans/ Preference in accordance with Public Law 88-352