Cloud Platform Developer (Solutions Architect 3/4)

The Innovative Customer Experience (ICE) Division is looking for a dynamic cloud platform developer who can help the cloud platform team design, develop, and maintain scalable, secure, and efficient applications and services leveraging cloud technologies. You'll leverage your expertise in cloud platforms, infrastructure as code, and modern software development practices to drive the future of cloud-based technologies.

We seek a cloud platform developer with advanced skills in designing, building, and securing platforms on AWS, Azure, and GCP. Candidates should have strong expertise in distributed systems, cloud-native architecture, container orchestration, microservices, and serverless technologies, focusing on scalable platform capabilities over application development.

The ideal candidate will possess extensive experience in building and maintaining CI/CD pipelines for provisioning and updating cloud infrastructure, with expertise in automating deployments using tools such as Terraform, Terragrunt, CloudFormation, or Bicep. Responsibilities include actively developing and managing infrastructure-as-code modules, enforcing compliance through policy-as-code solutions (including OPA, Sentinel, and Azure Policy), and designing reusable platform templates and services for engineering teams-such as standardized VPCs/VNets, Kubernetes clusters, IAM roles, and serverless environments.

Solutions Architect 3 $117,200 - $195,400

The selected candidate will be responsible for overseeing the delivery of moderately complex platform components, including networking architectures, identity integrations, and secure service configurations. In addition, they will routinely assess and implement cloud services, exercising sound judgement regarding cost, performance, scalability, and security considerations, and subsequently translating these decisions into effective infrastructure and automation solutions.

The individual will collaborate effectively with team members to implement self-service capabilities, such as service catalogs and deployment pipelines, resolve platform issues, and maintain secure, compliant, and reliable environments. Responsibilities include direct engagement with identity and access management, network configuration, secrets management, logging, and monitoring systems. The candidate is expected to prioritize automation, platform stability, and developer experience, while proactively enhancing system performance and cost efficiency. Furthermore, the role requires outstanding communication skills, with the capacity to clearly convey platform architectures and decisions to audiences with varying technical backgrounds. Maintaining up-to-date knowledge of emerging cloud technologies, contributing to strategic platform direction, and advancing best practices in cloud engineering are also essential components of this position.

A commitment to security, compliance, quality, and fostering a collaborative, inclusive engineering culture is essential.

Solutions Architect 4 $141,500 - $238,300

In addition to meeting all requirements above as the responsibilities of the cloud platform developer at the Solutions Architect 3 position, candidates selected as a Solutions Architect 4, must demonstrate enhanced capabilities in technical leadership, innovation, and independent execution. The successful candidate will provide technical mentorship, guidance, and knowledge transfer to junior cloud infrastructure team members, fostering professional development and promoting best practices across the organization. This role requires the ability to proactively research, evaluate, and assess emerging cloud technologies, tools, and services to identify opportunities for improvement, and to propose and champion innovative, forward-thinking solutions to complex cloud infrastructure challenges that align with organizational objectives and industry standards.

ICE division consists of more than 350 talented Solution Architects, Computer Systems Professionals, and Computer System Technician employees who provide the varied Laboratory organizations with Information Technology experts who design, build, and support their mission-driven technical needs, on the unclassified and classified networks through several different service touchpoints. In addition, optimize the use of information technology, ensure seamless delivery and operation of IT services by monitoring system performance, applying configuration management practices, creating processes and standards for selection and implementation., * Extensive experience deploying and managing cloud environments in AWS and GCP (Azure exposure a plus), including provisioning compute, networking, storage, IAM, and managed services.

• Build, maintain, and troubleshoot infrastructure-as-code (IaC) using Terraform/Terragrunt to provision and update cloud resources; manage state, modules, and environment configurations.
• Strong working knowledge of cloud platform engineering, including designing and implementing VPC/VNet architectures, IAM roles/policies, load balancing, autoscaling, and secure service configurations.
• Operate and support production cloud environments, including monitoring system health, responding to alerts, performing root cause analysis, and implementing fixes to maintain high availability and minimize downtime.
• Work directly with engineers and architects to implement infrastructure required for applications, including standing up environments, configuring services, and supporting deployments.
• Troubleshoot infrastructure and platform issues across networking, compute, containers, and IAM; identify root causes and implement corrective actions quickly.
• Experience with containerized environments, including building, deploying, and supporting workloads on Kubernetes (EKS/GKE), managing clusters, and working with container networking and scaling.
• patterns.

• Displays leadership on architecture, design, implementation, and optimization of highly complex, secure cloud platform solutions across Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS), supporting mission, scientific, and enterprise workloads in hybrid and multi-cloud environments.
• Drives technical direction for the adoption and integration of GCP, Azure, and AWS services, including infrastructure-as-code (e.g., Terraform, Deployment Manager, Bicep, CloudFormation), container platforms, and automated CI/CD pipelines; establishes reusable patterns, hardened baselines, and platform standards for the Laboratory.
• Provides senior-level technical leadership on large, complex cloud initiatives; mentors cloud engineers and collaborates across cybersecurity, networking, and mission stakeholders to deliver secure, scalable, and auditable solutions in regulated environments.
• Leads the development and advancement of enterprise cloud platform capabilities, including identity and access management, zero-trust architecture, observability, and cost optimization across GCP, Azure, and AWS; influences Laboratory-wide cloud strategy and multi-cloud governance.

Education/Experience at Solutions Architect 3: Position requires a Bachelor's degree and 8 years related experience; or an equivalent combination of education and experience directly related to the occupation. At this level, applicable advanced vendor and/or professional certification is desirable.

Education/Experience at Solutions Architect 4: Position requires a Bachelor's degree and 12 years related experience; or an equivalent combination of education and experience directly related to the occupation. At this level, applicable advanced vendor and/or professional certification is desirable.

Desired Qualifications:

• Implement and manage cloud observability solutions across AWS, Azure, and GCP, including configuring logging, metrics, and alerting (e.g., CloudWatch, Cloud Monitoring/Operations Suite), and using them to proactively detect, troubleshoot, and resolve production issues.
• Design and build cloud landing zones in AWS, Azure, and GCP, including account/project structure, networking, IAM, guardrails, and baseline services to enable secure, scalable, and repeatable environments.
• Develop and maintain infrastructure automation and platform tooling, including custom scripts and integrations using Python, PowerShell, or similar languages to automate provisioning, configuration, and operational workflows across AWS, Azure, and GCP.
• Apply strong knowledge of cloud networking principles in AWS, Azure and GCP, including VPC networks, subnets, routing, DNS, load balancing, and hybrid connectivity (VPN, VPC peering, Private Service Connect/Private Link).
• Have experience working with AI/ML services in AWS, GCP, Azure, including provisioning and configuring services (e.g., SageMaker, Vertex AI), managing access, and enabling their integration into secure, production-ready environments.

Work Location: The work location for this position is telework and is located in Los Alamos, NM. Telework is defined as working from offsite but within 2hours ground commute of this location. Reporting onsite may be periodically necessary. All work locations are at the discretion of management and can change at any time with appropriate notice.n, *Eligibility requirements: To obtain a clearance, an individual must be at least 18 years of age; U.S. citizenship is required except in very limited circumstances. See DOE Order 472.2 (https://www.directives.doe.gov/directives-documents/400-series/0472.2-border-a-chg1-ltdchg/@@images/file) for additional information.

Located in beautiful northern New Mexico, Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. Our generous benefits package includes:

• PPO or High Deductible medical insurance with the same large nationwide network
• Dental and vision insurance
• Free basic life and disability insurance
• Paid maternity and parental leave
• Award-winning 401(k) (6% matching plus 3.5% annually)
• Learning opportunities and tuition assistance
• Flexible schedules and time off (paid sick, vacation, and holidays)
• Onsite gyms and wellness programs
• Extensive relocation packages (outside a 50 mile radius)