Cloud Architect

In this role, you will design, build, and evolve a large-scale, globally distributed mission system operating across both AWS cloud environments and on-premises virtualized infrastructure. You will lead the architecture and implementation of secure, repeatable Infrastructure-as-Code (IaC) patterns to deploy and operate compute fleets, network connectivity, and platform services across multiple environments (development, test, staging, production, and lab). This role requires close collaboration with engineering, operations, security, and networking teams to improve reliability, standardize deployments, and accelerate delivery through automation.

• Design and implement reference architectures for AWS and hybrid environments (cloud + on-prem virtualization).
• Define deployment patterns for multi-account and multi-environment separation, network segmentation, and scalable compute/storage stacks.
• Establish standardized “landing zone” practices, including account structure, guardrails, logging, tagging, and cost controls.
• Build and maintain Terraform modules and reusable IaC patterns for AWS infrastructure, including VPCs, IAM roles/policies, load balancing, and logging foundations.
• Architect and support virtualized compute fleets using VMware/vSphere patterns for on-prem environments, including golden images, patching baselines, and provisioning workflows.
• Partner with security teams to implement secure-by-design architectures, including least privilege IAM, encryption, and centralized audit logging.
• Design for resilience and continuity with backup/restore strategies, disaster recovery considerations, and multi-AZ patterns.
• Support CI/CD enablement for infrastructure deployments using Git-based workflows integrated with Terraform plans/applies.
• Collaborate with application teams to provide standardized environments and deployment blueprints.
• Produce clear architecture documentation, including logical/physical diagrams, environment definitions, and “as-built” artifacts.

• Active Top Secret/SCI
• Bachelor’s degree in related field. 4 additional years of experience will substitute in lieu of degree.
• 10-15+ years of experience in cloud architecture, systems engineering, or infrastructure engineering, including 3+ years as a hands-on AWS architect/lead.
• Deep expertise with AWS core services and secure architectures (networking, IAM, logging, compute, storage).
• Hands-on expertise with Terraform for production-grade IaC (modules, state management, promotion strategies, drift detection).
• Experience designing and operating hybrid environments (cloud + on-prem virtualization).
• Ability to translate requirements into scalable, maintainable, and secure architectures while providing implementation guidance.
• Ability to travel internationally up to 10%.
• Must possess an active Passport or obtain one upon hire.

Desired Skills

• AWS certifications (Solutions Architect Professional preferred).
• Experience with VMware/vSphere architecture and operations (templates, clusters, networking, storage).
• Familiarity with configuration automation tools (Ansible, Packer) and GitOps-style workflows.
• Experience with observability patterns (metrics/logs/traces) and integrating monitoring into operations.
• Experience implementing multi-account AWS governance (Organizations, SCPs) and cost controls (tagging, budgets).

Please note that all applicants mustbe U.S. citizens and require additional screening from our clients.

FusionInnovation’s recent growth has earned us a top spot in the Inc 5000 FastestGrowing Private Companies in America and in Washington Business Journal’s BestPlaces to Work multiple years in a row. Our team members are passionate abouttheir work and are empowered to contribute their unique skills and perspectivesto our projects. Here at Fusion, we put people first. When you join us, youdon’t just join a company, you join a family. If you are ready to be part of afun and engaging team where your innovative ideas are heard, supported, andmake ever lasting mission impacts for our Nation’s most sensitive programs, youhave come to the right place.