Principal AWS & Kubernetes Architect

Salary: $208,000 - 208,000 per year Requirements:

• Active Top Secret/SCI clearance, with the ability to obtain and maintain a polygraph
• U.S. citizenship
• 12+ years of relevant professional experience in software engineering, cloud or platform engineering, systems architecture, identity engineering, or a closely related technical area
• Strong hands-on experience operating and troubleshooting production Kubernetes environments, especially Amazon EKS
• Strong AWS cloud architecture and engineering background
• Deep practical experience implementing and troubleshooting enterprise Identity and Access Management solutions
• Solid knowledge of OAuth 2.0, OIDC, SAML, SSO, LDAP, identity federation, RBAC, and related authentication and authorization concepts
• Practical experience with PKI, X.509 certificates, TLS/mTLS, certificate trust, and certificate-based authentication
• Experience integrating applications and APIs with enterprise identity platforms
• Strong Docker and containerization experience
• Experience with Infrastructure as Code, CI/CD, and GitOps
• Software engineering experience, preferably with Java and/or Python
• Strong understanding of APIs, REST services, distributed applications, networking, and cloud-native architectures
• Ability to investigate complex issues independently across multiple technology layers
• Demonstrated technical leadership and the ability to communicate effectively with engineers, customers, and senior stakeholders

• Architect, operate, and troubleshoot production Kubernetes environments, primarily Amazon EKS
• Design and maintain secure AWS cloud architectures and supporting infrastructure
• Architect and integrate enterprise identity, authentication, and authorization solutions
• Create authentication and authorization patterns using OAuth 2.0, OIDC, SAML, SSO, LDAP, federation, RBAC, and ABAC
• Work with identity platforms such as Keycloak, PingFederate, SailPoint, Radiant Logic, or similar technologies
• Design and troubleshoot PKI, X.509 certificates, TLS/mTLS, trust chains, and certificate-based authentication
• Support secure access for web applications, APIs, microservices, users, and machine identities
• Build and maintain containerized application environments using Docker and Kubernetes
• Apply Infrastructure as Code, CI/CD, and GitOps practices across cloud and platform environments
• Investigate complex issues spanning applications, APIs, Kubernetes, AWS, networking, identity, and certificates
• Partner with software engineers to integrate identity and security into applications
• Translate customer objectives into practical architectures, MVPs, technical roadmaps, and executable engineering work
• Lead technical discussions, explain tradeoffs clearly, and help engineers grow across software, platform, security, and identity disciplines
• Develop repeatable approaches that make secure solutions easier to operate, maintain, and understand

• AWS
• Architect
• CI/CD
• Cloud
• Docker
• GitOps
• Support
• Java
• Kubernetes
• LDAP
• OAuth
• Python
• REST
• RBAC
• SAML
• Security
• Web
• microservices
• Active Directory
• Ansible
• DevSecOps
• DevOps
• GitLab
• Jenkins
• Terraform

More:

We are seeking a hands-on Principal AWS, Kubernetes & Identity Architect to help design, build, operate, and improve secure cloud-native platforms and the applications that run on them. This role combines production Kubernetes engineering, secure AWS cloud architecture, and enterprise identity, authentication, and authorization. You will work directly with engineering teams and customers, moving between AWS infrastructure, Kubernetes clusters, identity platforms, certificates, APIs, and application code. This is a full-time, in-person role with benefits including 401(k), 401(k) matching, dental, health, life, and vision insurance, paid time off, a flexible schedule, referral program, relocation assistance, and tuition reimbursement. Compensation is up to $208,000 per year.

last updated 36 week of 2026