AWS Solution Architect, GovCloud LZA

Job Description -

Need 3 References Preferred Skills are highly required
AWS Solution Architect, GovCloud LZA Remote

We are seeking a highly skilled and self-driven AWS GovCloud LZA Engineer to lead the deployment and customization of a secure, scalable, and compliant infrastructure using AWS Landing Zone Accelerator (LZA) on GovCloud.

This role will serve as the primary engineering resource responsible for the end-to-end architecture, deployment, customization, and security of AWS Control Tower-based environments targeting FedRAMP High compliance, with potential alignment to DoD IL-5 requirements.

Key Responsibilities:

• Design, deploy, and operate AWS Landing Zone Accelerator (LZA) in AWS GovCloud using best practices.
• Customize AWS Control Tower environments for GovCloud including:
  • Service Catalog
  • CDK
  • CloudFormation templates
• Implement and extend configuration overlays and blueprints from existing AWS samples:
  • AWS LZA for TSE-SE
  • AWS LZA for CCCS Medium (FedRAMP High adaptation)
• Translate AWS Security Reference Architecture (SRA) examples into Control Tower LZA customizations:
  • AWS SRA Examples
• Serve as the go-to engineering lead for debugging, customizing, and securing multi-region GovCloud deployments.
• Plan and implement controls to align with DoD Secure Cloud Computing Architecture (SCCA) in anticipation of future IL-5 needs.

Required Qualifications:

• Proven expertise in AWS GovCloud and AWS Control Tower architecture and operations.
• Deep knowledge of AWS LZA deployment, customization, and maintenance.
• Hands-on experience with:
  • AWS CDK and CloudFormation
  • Service Catalog product deployments
  • Multi-region AWS GovCloud environments
• Strong debugging, problem-solving, and automation skills in complex AWS environments.
• Familiarity with FedRAMP High compliance and DoD security architecture requirements.
• Ability to work independently and serve as the primary technical resource on the project.

Preferred Qualifications:

• Prior experience deploying IL-5 or IL-4 DoD workloads in AWS.
• Experience working in secure, regulated cloud environments.
• AWS certifications (e.g., Solutions Architect Professional, Security Specialty).