Cloud Architect

As the Cloud Architect, you will be responsible for designing, governing, and continuously maturing FEMA's enterprise cloud architecture across IaaS, PaaS, and SaaS environments. This role provides strategic architectural leadership in support of FEMA's CI/CD DevOps model, FedRAMP High compliance requirements, and the consolidation of cloud services under the Bridge BPA. The Cloud Architect ensures that cloud solutions are scalable, secure, highly available, and aligned with FEMA's enterprise IT strategy, target architectures, and DHS security policies., * Lead the design and development of cloud-based enterprise architectures supporting FEMA's IaaS, PaaS, and SaaS requirements, including FedRAMP High-authorized Commercial Cloud Brokers (CCBs).

• Develop and enhance FEMA's Cloud Architecture Repositories and technical insertion processes, ensuring alignment with enterprise target architectures per Section 4.2.1 of the SOO.
• Create and promote cloud architecture frameworks and models for FEMA adoption, supporting the reduction of IT complexity through reuse of existing solutions.
• Design architectures that incorporate Virtual Compute Services (VCS), Scaling Automation Services (SAS), containerization (Docker, Kubernetes), serverless compute, and managed database services (relational, NoSQL, Data Warehouse).
• Architect Private Virtual Cloud Networks (PVCNs), Virtual Load Balancing (VLB), Direct Connection Services (DCS), and hybrid network connectivity including DHS TIC 3.0 compliance and FEMA's hub-and-spoke model.
• Provide architectural guidance for key management (KMS/HSMs), Identity and Access Management (IAM), Infrastructure as Code (IaC), and Content Delivery Services (CDS).
• Support Enterprise Architecture alignment with FEMA's Strategic SELC processes and IT investment decision-making, including gap analysis of existing Disaster and Cloud architectures.
• Lead cloud architecture planning for Joint Field Offices (JFOs), COOP, and disaster recovery operational scenarios.
• Ensure all architectural designs meet FISMA High security categorization, NIST 800-53, FedRAMP JAB Full-ATO (High Impact Level), and DHS 4300A Sensitive Systems standards.
• Collaborate with FEMA's Data Governance Council to support data architecture activities and provide subject-matter expertise.
• Evaluate and recommend emerging cloud technologies, AI/ML platforms, and development platform capabilities (Python, .Net, Java, Node JS, etc.) for adoption within FEMA's cloud portfolio.
• Interface with Engineering teams, Program Managers, and FEMA OCIO leadership to ensure architectural solutions support mission-critical IT objectives.
• Support security engineering tasks including design of the FEMA Enterprise Security Stack (FESS), WAF configurations, Palo Alto VM-Series Next Generation Firewalls, and FEMA SOC visibility requirements.

• At least seven (7) years of relevant experience.
• Deep expertise in cloud enterprise architecture design across AWS, Azure, and GCP, with strong knowledge of FedRAMP High, FISMA, and DHS compliance requirements.
• Strong proficiency in designing IaaS/PaaS services including virtual compute, auto-scaling, containerization (Docker, Kubernetes), serverless functions, managed databases, and multi-tier storage architectures.
• Expert-level knowledge of cloud networking, including VPCs, VPNs, Direct Connect/ExpressRoute, hybrid cloud connectivity, TIC 3.0, and hub-and-spoke network models.
• Experience with Infrastructure as Code (IaC) tools (Terraform, CloudFormation, Ansible) and CI/CD pipeline architectures.
• Strong understanding of Key Management Services (KMS), HSMs, Identity and Access Management (IAM), and multi-factor authentication standards.
• Knowledge of FEMA's SELC processes and federal enterprise architecture frameworks (TOGAF, DoDAF, or equivalent).
• Experience with cloud security tools such as Palo Alto firewalls, WAF, Splunk SIEM integration, McAfee, Tenable Nessus, and ForeScout.
• Excellent communication and stakeholder engagement skills; ability to brief senior government officials and translate complex architecture concepts for non-technical audiences.
• Familiarity with Section 508 accessibility requirements for ICT deliverables.

Education & Certification Requirements:

• Bachelor's or Master's degree in Computer Science, Information Systems, Electrical Engineering, or a related technical field.
• AWS Certified Solutions Architect - Professional, Azure Solutions Architect Expert, or GCP Professional Cloud Architect.

Preferred:

• TOGAF certification preferred.
• FedRAMP or cloud security certifications (CCSP, CISSP) highly desirable., * U.S. Citizenship.
• Ability to obtain Public Trust. Active Public Trust is preferred. FEMA Public Trust is highly preferred.

Pulled from the full job description

• Health insurance
• Retirement plan
• Paid time off
• Dental insurance
• Paid holidays, * Competitive salary based on experience and qualifications.
• Comprehensive benefits package including health, dental, and retirement plans with company match.
• Paid time off and federal holidays.
• Professional development support.

SHR is a premier technology integrator solving our nation's most complex modernization and readiness challenges across the defense, federal civilian, and intelligence markets. Our robust portfolio of offerings includes high-end solutions in systems engineering and integration, enterprise IT, including cloud services, cyber, software, advanced analytics, and AI. With a deep understanding of our customers' challenges and expertise in existing and emerging technologies, we combine the best components from our portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions.