Select Source Solutions

Lead AWS Platform Architect

Remote
Full Time
Experienced

Our client is seeking a remote Lead AWS Platform Architect to provide senior technical leadership for a mission-critical cloud platform in a remote work environment.

This is a hands-on architecture and platform-engineering role focused on AWS, Amazon EKS, Terraform, GitOps, CI/CD, security, and federal cloud compliance. The platform is highly automated, with infrastructure and application changes managed through code, peer review, and deployment pipelines rather than manual console configuration.

The Lead AWS Platform Architect will take ownership of platform architecture and implementation across multiple AWS environments, helping guide the evolution toward a secure multi-account federal cloud architecture.

The right candidate is equally comfortable designing cloud architecture and implementing it. You should be able to move from architecture decisions and Terraform modules to EKS operations, GitOps workflows, CI/CD security controls, and production troubleshooting.

Success in this role means delivering secure, reliable, highly automated cloud infrastructure while raising engineering standards across architecture, security, change control, automation, and operational evidence.

What You Will Do

  • Serve as a senior technical lead for AWS platform architecture, engineering, security, and automation.

  • Own and evolve Terraform across multi-environment and multi-account AWS infrastructure.

  • Develop reusable Terraform modules and manage remote state, dependencies, lifecycle, and infrastructure drift.

  • Safely reconcile existing AWS resources with Infrastructure as Code.

  • Design, operate, and improve production Amazon EKS environments.

  • Manage EKS networking, autoscaling, add-ons, workload identity, Helm, ingress, load balancing, upgrades, and cluster lifecycle.

  • Design and maintain secure AWS networking and identity patterns.

  • Support IAM, workload identity, network isolation, secrets management, and least-privilege access.

  • Develop and extend GitOps deployment models using Argo CD, Flux, or comparable technologies.

  • Design and maintain GitLab CI/CD pipelines supporting infrastructure and application delivery.

  • Implement automated security controls including SAST, Infrastructure as Code scanning, container scanning, secrets detection, policy-as-code, and deployment gates.

  • Support secure container supply-chain practices including image validation, signing, and deployment controls.

  • Help design and implement a federal multi-account AWS landing-zone architecture.

  • Develop approaches for cross-account identity, networking, environment isolation, and controlled promotion between development, testing, and production environments.

  • Work with AWS services including VPC, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, Lambda, and related cloud technologies.

  • Support cloud-native, containerized, microservices, and serverless architectures.

  • Implement monitoring, logging, alerting, and continuous security visibility across the platform.

  • Support the technical implementation of controls aligned with NIST SP 800-53, FISMA, RMF, and Authority to Operate requirements.

  • Produce and maintain technical evidence supporting security assessments, compliance reviews, and ATO activities.

  • Troubleshoot complex AWS, Kubernetes, Terraform, networking, GitOps, CI/CD, and security issues.

  • Mentor engineers and provide technical direction on cloud architecture, automation, Kubernetes, Infrastructure as Code, and DevSecOps practices.

  • Improve engineering standards around peer review, change management, deployment validation, documentation, and evidence-based operations.

  • Collaborate with developers, security teams, architects, program stakeholders, and other technical personnel.

  • Perform other related technical responsibilities as assigned.

What You Will Bring

Required Qualifications

  • 7+ years of professional experience in cloud infrastructure, platform engineering, DevOps, systems engineering, or a related discipline, including senior ownership of production environments.

  • 5+ years of hands-on experience engineering and supporting AWS cloud environments.

  • Deep hands-on expertise with Terraform, including reusable modules, remote state, dependency management, and infrastructure drift remediation.

  • Significant experience operating Amazon EKS or Kubernetes at production scale.

  • Experience with Kubernetes networking, workload identity, Helm, autoscaling, ingress, load balancing, and cluster lifecycle management.

  • Strong hands-on experience with AWS services including VPC, IAM, EKS, RDS/Aurora, S3, CloudFront, Secrets Manager, and related technologies.

  • Experience designing or supporting multi-environment and multi-account AWS architectures.

  • Hands-on experience implementing GitOps using Argo CD, Flux, or comparable technologies.

  • Experience designing and maintaining CI/CD pipelines, with GitLab CI/CD strongly preferred.

  • Hands-on DevSecOps experience implementing automated security scanning, secrets detection, Infrastructure as Code scanning, container scanning, policy-as-code, or pipeline security gates.

  • Experience with Docker and secure containerized application environments.

  • Experience supporting cloud-native, microservices, or serverless architectures.

  • Working knowledge of federal cybersecurity frameworks such as FISMA, NIST SP 800-53, and RMF.

  • Familiarity with the technical evidence and controls required to support an Authority to Operate.

  • Strong troubleshooting, architecture, documentation, and communication skills.

  • Demonstrated ability to mentor engineers and provide technical leadership.

  • Ability to obtain and maintain a U.S. Government security clearance.

Preferred Qualifications

  • Experience designing or operating AWS Organizations, Control Tower, federal landing zones, or comparable multi-account architectures.

  • Experience with AWS GovCloud or FedRAMP-authorized cloud environments.

  • Experience with container supply-chain security, SBOMs, image signing, admission control, or AWS Signer.

  • Experience with CloudWatch, Grafana, Prometheus, or comparable observability platforms.

  • Experience supporting FISMA Moderate or other regulated production environments.

  • Experience with high-availability, mission-critical cloud systems.

  • Familiarity with scientific, environmental, weather, geospatial, or other data-intensive systems.

  • Familiarity with scientific data formats such as GRIB or NetCDF.

  • Relevant AWS, Kubernetes, Terraform, or DevOps certifications.

Work Authorization / Security Clearance Requirements

  • Ability to obtain and maintain a U.S. Government security clearance.

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume or Paste resume
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status


Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 07/31/2029
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Please check one of the boxes below:

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Human Check*