> Markdown version of [/jobs/ext/4721093-software-architect](https://www.wearedevelopers.com/jobs/ext/4721093-software-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Architect - **Company:** Nalej Corporation - **Location:** Arlington, VA, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Airflow, Amazon Web Services, Amazon S3, Apache HTTP Server, Business Logic, Audit Trail, Cyber Security, Data Architecture, Data Governance, Data Infrastructure, Dataspaces, Distributed Computing Environment, Python (Programming Language), Key Management, PostgreSQL, Octopus Deploy, Open Source Technology, OpenID, Public Key Infrastructure, Software Architecture, Security Assertion Markup Language (SAML), Software Engineering, Vault (Revision Control System), SQL Databases, Data Streaming, Workflow Management Systems, Openapi, Cloud Platform System, Okta, Istio, Software Security, Backend, Agentic-AI, Gitlab, Kubernetes, Apache Kafka, Api Design - **Published:** November 14, 2026 - **Apply:** https://www.juju.com/job/16_74680e811 ## About the Role Strong experience with infrastructure as code, Crossplane, GitOps, Argo CD, Helm, container orchestration, observability, resiliency, and platform engineering patterns. Software and Interface Architecture Strong architectural experience with backend services in Go and or Python using modular, API-first, event-driven, and domain-oriented patterns. Ability to define clear service boundaries, interface contracts, integration patterns, nonfunctional requirements, and migration paths for complex systems. Data Architecture Experience designing modern data platforms using components such as Apache Iceberg, Trino, Airflow, Kafka, PostgreSQL, object storage, and distributed processing patterns. Ability to address data lifecycle, lineage, governance, access control, schema evolution, performance, reliability, and disconnected or bandwidth-constrained operations. Security Identity and Compliance Experience designing zero-trust architectures and implementing controls aligned with NIST 800-53, Department of War guidance, and regulated cloud environments. Hands-on knowledge of Istio, Keycloak, OIDC, SAML, CAC and PKI integration, Vault, policy enforcement, auditability, and secure software supply chains., Must be a US Citizen 8 or more years of progressive software engineering experience, including at least three years in a dedicated software architecture role. Proven success designing, deploying, and operating complex systems in Department of War Impact Level 2, 4, or 5 environments. Demonstrated ability to operate autonomously as a senior individual contributor and influence technical direction without relying on formal people-management authority. Strong written and verbal communication, including the ability to explain architecture, risks, and tradeoffs to technical and nontechnical stakeholders. Ability to satisfy program-specific citizenship, background, clearance, and customer-access requirements. Preferred Qualifications Experience architecting systems for disconnected operations, tactical edge environments, intermittent connectivity, or constrained infrastructure. Experience separating reusable open-source platform capabilities from proprietary application logic in enterprise or government systems. Experience guiding multiple engineering teams or AI-enabled development workflows through shared architecture, contracts, and technical standards. Relevant AWS, Kubernetes, security, or architecture certifications. ## Description Serve as the lead individual-contributor design authority for comprehensive, modular systems deployed on Kubernetes using AWS Elastic Kubernetes Service. Architect across the full application stack, integrating high-throughput backend services in Go and Python, modern frontend applications, and complex data infrastructure. Define secure, zero-trust platform patterns using Istio for mutual TLS and default-deny networking, Keycloak for CAC and PKI authentication and authorization, Vault for secrets management, and policy engines such as Kyverno . Design scalable data ecosystems using open table formats such as Apache Iceberg, distributed SQL engines such as Trino, workflow orchestration such as Airflow, Kafka-based event streaming, PostgreSQL, and S3-compatible storage. Establish declarative infrastructure and GitOps strategy using Crossplane, Argo CD, Helm, and related tooling, with clear boundaries between open-source infrastructure and custom applications. Design stable interface contracts using REST, gRPC, and OpenAPI so systems are easily consumed, tested, and maintained by both human developers and autonomous AI agents. Produce clear reference architectures, system diagrams, architecture decision records, interface specifications, security patterns, and implementation guidance. Partner with engineering, cybersecurity, platform, data, product, and program stakeholders to resolve tradeoffs and ensure architecture is secure, deployable, supportable, and aligned with mission requirements. Required Technical Expertise Cloud Platform and Infrastructure Deep expertise with AWS, AWS GovCloud, Kubernetes, and Amazon EKS in production environments., Experience designing within modern CI and CD ecosystems such as GitLab and remote developer environments such as Coder and JupyterHub. Ability to create paved-road standards, reusable platform capabilities, and machine-readable contracts that improve developer velocity without weakening security or governance., Reference architectures and interface contracts are clear enough for multiple teams and AI agents to build in parallel with fewer integration failures. Security, identity, compliance, data governance, and deployment constraints are designed into the platform rather than added late in delivery. Platform decisions create repeatable paved-road patterns while preserving appropriate autonomy for product and mission teams. Architecture artifacts remain current, implementation teams receive timely decisions, and major technical risks are surfaced early with actionable options.