> Markdown version of [/jobs/ext/1247915-senior-cloud-architect](https://www.wearedevelopers.com/jobs/ext/1247915-senior-cloud-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Architect - **Company:** General Dynamics Information Technology - **Location:** San Antonio, TX, United States - **Experience:** Expert - **Salary:** $147,292.0 - $199,278.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Windows, Agile Methodology, Amazon Web Services, Systems Engineering, Confluence, JIRA, Audit Trail, Microsoft Azure, Microsoft Online Services, Cloud Computing, Cloud Engineering, Configuration Management, Cyber Security, Information Systems, Linux, FS Design Studio, Infrastructure as a Service (IaaS), Identity and Access Management, Log Analysis, Network Connections, Network Planning and Design, Network Segmentation, Platform as a Service (PAAS), Role-Based Access Control, Cloud Services, Zero Trust Network Access, Virtualization Technology, Wi-Fi Technology, Data Logging, Cloud Platform System, HybridCloud, SC Clearance, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Bicep, Nessus, Cloudwatch, Terraform, Servicenow, Vulnerability Analysis - **Published:** July 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=53b2b2386cfd2ad3 ## About the Role Clearance: Ability to obtain and maintain a Secret clearance Customer: Air Education and Training Command (AETC), United States Air Force, * Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related field (or equivalent practical experience). * 10+ years of experience in enterprise IT/cloud architecture, systems engineering, or network modernization; 5+ years leading technical efforts on large programs. * Hands-on expertise with cloud-integrated network designs, hybrid cloud architectures, and Zero-Trust patterns. * Strong experience with IAM/RBAC, Kubernetes/container security, and Linux hardening; working knowledge of Windows hardening. * Architect secure, scalable Cloud infrastructures and network connectivity. * Design cloud-native data platforms, pipelines, and analytics architectures. * Automate cloud provisioning with Terraform/ARM/Bicep; ensure consistent, FedRAMP-compliant environments. * Implement RBAC, least-privilege, encryption, and NIST-aligned security controls. * Drive FinOps optimization and guide engineering teams on cloud best practices. * Enhance the security and administration of Spectrum IT systems operations. * Migrate and modernize with config-level changes. * Push toward Platform as a Service (PaaS) and cloud-native where possible. * Replatform if the application can leverage PaaS. * Rehost using AWS/Azure Infrastructure-as-a-Service (IaaS) if the application can't leverage PaaS. * Use Microsoft Cloud Adoption Framework (CAF) and the Azure Well-Architected Framework. * Leverage the NTIA FSDS IL5 tenant based on the single tenant architect * Demonstrated ability to enforce STIGs/SRGs, remediate ACAS/Nessus findings, and produce RMF/ATO documentation. * Proficiency with cloud-native monitoring/logging (e.g., CloudWatch or platform equivalents), securing service meshes, and IaC security baselines. * Experience with Agile/Lean delivery; effective communicator able to brief senior business and government stakeholders. * U.S. citizen; able to obtain Secret clearance and USAF CAC; pass government background checks and fingerprinting. * AWS Certified Cloud Architect Desired Qualifications * Experience with 5G integration and enterprise Wi-Fi architectures. * DoWM 8140.03-aligned cyber workforce qualification or willingness to obtain * Familiarity with AETC/USAF operational environments; prior support to USAREUR-AF or other DoW organizations is a plus. * Experience with SAFe practices, Jira/Confluence, and ServiceNow in DoW environments., 10 + years of related experience * may vary based on technical training, certification(s), or degree ## Description Architecture & Design * Architect end-to-end cloud-native, software-defined solutions that meet AETC's performance, scalability, and user-experience objectives; lead the enterprise evolution to Zero-Trust architectures. * Design and implement secure hybrid environments (public cloud + on-prem), including cloud networking, segmentation, service-to-service security, and federation models. * Engineer Identity and Access Management (IAM) with role-based access controls (RBAC), least privilege, and single-/multi-domain federation. * Secure Kubernetes platforms and container runtimes (network segmentation, RBAC, workload isolation) and guide standards for virtualized environments. * Develop Infrastructure-as-Code (IaC) security baselines to enable repeatable, compliant deployments. * Lead technical options, costed alternatives, and future-state roadmaps aligned to mission priorities and budget. Security & Compliance * Implement RMF-aligned controls; produce/maintain ATO artifacts; support continuous monitoring strategy and control assessments with ISSM/ISSO/SCV. * Enforce DISA STIG/SRG configurations across Linux/Windows systems, cloud services, VMs, and Kubernetes clusters; maintain timely patching and flaw remediation. * Enable ACAS/Nessus vulnerability scanning, report results, remediate findings, and sustain POA&Ms in coordination with Government cybersecurity leads. * Implement web content filtering and traffic prioritization consistent with DoW/USAF policy and AWAKEN rules of behavior. * Map technical controls to NIST SP 800-53, DISA STIGs, and (as applicable) CMMC requirements; maintain secure logging, audit trails, and evidence packages. * Support incident response in cloud environments (log analysis, containment, recovery) and contribute to the Government's cyber incident reporting processes. Engineering, Testing & Delivery * Operate in a pre-deployment test/lab environment, perform MBSE-driven validation, and deliver successful test results prior to production rollout. * Troubleshoot complex enterprise connectivity issues impacting performance or user experience; provide Tier-3 engineering guidance to operations teams. * Optimize network and cloud configurations for resilience, availability, latency, jitter, and QoS in line with AWAKEN KPIs/SLAs. Collaboration & Governance * Engage the COR and AWAKEN Government Technical Leads as a trusted advisor; communicate clearly across diverse technical backgrounds. * Partner with the Program Manager, providing status, recommendations, and technical insight; contribute to PMRs and enterprise planning. * Support Configuration Control Boards (CCBs) by proposing changes, documenting artifacts, and sustaining the enterprise baseline. ## Related Videos - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)