Infrastructure Architect

Infrastructure Architect

We are seeking an Infrastructure Architect to lead the design and buildout of a standardized, secure, and scalable cloud platform (NGSC). NGSC refers to a modern, enterprise cloud environment built on AWS that includes standardized networking, security controls, CI/CD integration, infrastructure automation, and guardrails to support multiple applications and programs in a consistent and compliant way. This role will own the end-to-end architecture from network and security layers through CI/CD and developer enablement.

Key Responsibilities:

• Lead design and implementation of NGSC, including VPC architecture, segmentation, routing, and secure connectivity
• Define and implement infrastructure guardrails to enforce security, compliance, and standardization across all programs
• Own GitLab architecture, including pipeline standards, runner strategy, and version upgrades
• Standardize Infrastructure as Code using OpenTofu or Terraform, including reusable modules and templates
• Design high availability and disaster recovery strategies using multi-AZ and multi-region architectures
• Establish secure access patterns using AWS Workspaces, Zscaler, and other Zero Trust solutions
• Define end-to-end connectivity from network edge (Palo Alto firewalls, ingress/egress) through AWS to application access
• Integrate security scanning and compliance checks into CI/CD pipelines
• Define observability standards across logging, monitoring, and alerting

Required Qualifications:

• 10+ years of experience in infrastructure engineering or architecture
• Strong hands-on experience with AWS architecture, including VPC design, IAM, EC2, RDS, and networking
• Proven experience designing and implementing multi-AZ and multi-region architectures for high availability and resilience
• Strong experience with CI/CD platforms, preferably GitLab
• Hands-on experience with Infrastructure as Code (Terraform or OpenTofu)
• Strong understanding of networking, firewalls, and secure connectivity
• Experience building platforms that support multiple applications and teams
• Strong understanding of DevSecOps practices and automation

Nice to Have:

• Experience with AWS Workspaces or similar virtual desktop solutions
• Experience with Zscaler or other Zero Trust network access solutions
• Experience integrating Palo Alto firewalls or similar network security tools
• Experience in federal or regulated environments

What Success Looks Like:

• NGSC is fully established with standardized architecture and guardrails
• All applications are onboarded through consistent CI/CD pipelines
• Infrastructure is reusable through IaC modules, reducing duplication
• High availability is achieved through proper multi-AZ and multi-region design
• Secure access is enforced through Zero Trust patterns
• Reduced operational overhead and improved system visibility

Location: Remote

Clearance: Ability to obtain Tier 4 Public trust.