AWS Cloud Architect

Job Title: AWS Cloud Architect

Location: Kansas City, MO, USA

Duration: 6 Months + Extension

Bill Rate: $140,000

Job Type: W-2 Contract

Client: To Be Discussed Later

Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD

Job Description:
The successful candidate will:

• Deliver a secure, scalable, available, and maintainable AWS GovCloud architecture.
• Provide reliable technical support for the ATO process.
• Establish repeatable IaC and DevSecOps practices.
• Collaborate with Drupal SME to deploy secure Drupal 11 environment.
• Integrate Drupal 11 with the frontend (React/Next.js) and AWS managed services including Bedrock.
• Reduce security and operational risk through automation and preventive controls.
• Work with the agency's ISO organization and support successful assessment, authorization, deployment, and continuous monitoring.

Responsibilities:

• Design and document secure, scalable, and highly available AWS GovCloud architectures.
• Define system boundaries, network topology, data flows, trust zones, and disaster-recovery strategies.
• Select and configure AWS services appropriate for the system's FedRAMP requirements.
• Implement secure AWS architectures using IAM, VPC, KMS, Secrets Manager, CloudTrail, CloudWatch, AWS Config, WAF, GuardDuty, and related services.
• Integrate Drupal with React/Next.js, APIs, PostgreSQL, object storage, caching, search, and content-delivery services.
• Apply least privilege, separation of duties, encryption, secure administration, and defense-in-depth principles.
• Support the obtaining and maintenance of ATO documentation, including system security plans, architecture diagrams, control implementation descriptions, and technical evidence.
• Collaborate with agency's Information Security Officers, compliance teams, independent assessors, agency stakeholders, and development teams throughout the ATO process.
• Build reusable and secure IaC modules for networking, IAM, compute, databases, storage, monitoring, and security services.
• Comply with federal information-security, privacy, privileged-access, and acceptable-use policies.
• Design and maintain secure CI/CD pipelines for infrastructure, Drupal, frontend applications.
• Integrate automated testing, vulnerability scanning, dependency scanning, secrets detection, and infrastructure security checks into the development lifecycle.
• Support secure deployment, patching, configuration management, vulnerability remediation, and change control.
• Design centralized logging, monitoring, alerting, backup, recovery, and incident-response capabilities.
• Establish secure patterns for Drupal administration, content workflows, media management, and API access.
• Support deployment and integration of Drupal 11 in AWS GovCloud.
• Review Drupal modules, dependencies, and integrations for security and maintainability.
• Produce architecture documentation, implementation plans, operational procedures, and technical runbooks.

Requirements

• U.S. Citizenship and ability to obtain and maintain a Federal Public Trust clearance.
• 7+ years of experience designing and implementing public-facing, secure, available cloud infrastructure using AWS managed services.
• Experience with AWS GovCloud or another regulated AWS environment.
• Hands-on experience with AWS security architecture, IAM, networking, encryption, logging, monitoring, and incident response.
• Experience supporting federal ATO activities and security authorization processes.
• Working knowledge of FedRAMP, NIST 800-53, risk management, and continuous monitoring.
• Strong infrastructure-as-code experience using Terraform or equivalent tools.
• Experience designing, implementing and operating secure CI/CD pipelines.
• Experience with public-facing web application architecture, including WAF, load balancing, API security, and DDoS protection.
• Experience with managed container services (ECS/Fargate or EKS).
• Experience with Amazon Bedrock, secure AI application deployment and integration.
• Experience designing highly available systems and disaster-recovery solutions.
• Experience creating architecture diagrams, security documentation, implementation plans, and operational runbooks.
• Ability to obtain and maintain a High-Risk Public Trust determination. Must successfully complete applicable background investigations and agency suitability requirements.

Desired

• Experience deploying and integrating Drupal 11 in AWS.
• Experience with decoupled Drupal and React/Next.js architectures.
• Familiarity with Drupal JSON:API or GraphQL, PostgreSQL, Redis, OpenSearch, and S3-based media storage.
• AWS Solutions Architect or AWS Security Specialty certification.
  
  

  Equal Opportunity Employer: We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.