Senior Cloud Architect

VTG is seeking a highly skilled and motivated Senior Cloud Architect to join our VAULT Data Platform (VDP) team in Beavercreek. The Cloud Architect will work closely with cross-functional teams to ensure systems comply with new VDP requirements, security policies, standards, and best practices. The position requires hands-on experience implementing security compliance, cloud automation, continuous integration/continuous deployment (CI/CD) and DevSecOps best practices to enhance the security, scalability, and efficiency of mission-critical applications.

Enterprise Data Platform Architecture:

* Design and architect a federated Enterprise Data Catalog that provides DAF-wide visibility of authoritative data sources and assets

* Develop cloud-native solutions with intuitive self-service interfaces and advanced data product search capabilities

* Implement domain-specific governance frameworks with granular access controls and automated metadata ingestion

* Ensure interoperability with existing data systems and catalogs across diverse environments

API Management & Integration:

* Architect secure, scalable Enterprise API Management solutions for standardized data sharing across the DAF

* Design real-time monitoring, analytics, and alerting systems for performance optimization

* Implement comprehensive audit logging and data exchange management capabilities

* Develop automated tools for managing data product recalls and consumer notifications

Security & Identity Management:

* Integrate Identity Credential Access Management (ICAM) capabilities including Role-Based Access Controls (RBAC)

* Ensure secure data discovery and sharing frameworks meet DoD security standards

* Design and implement enterprise-grade authentication and authorization systems

Platform Modernization & Migration:

* Lead the technical evaluation and sunset planning for legacy analytic and visualization capabilities

* Develop migration strategies and technical roadmaps for transitioning users and workloads to new solutions

* Architect cost-effective solutions that optimize Compute and Store (C&S) resources

MVP Development & Delivery:

* Design and deliver Minimum Viable Products (MVP) for Enterprise Data Catalog, API Management, and ICAM capabilities

* Collaborate with cross-functional teams to ensure rapid prototyping and iterative development

* Balance immediate operational needs with long-term strategic architectural goals

* You will work closely with the VDP Program Management Office and Functional Management Office to ensure technical solutions align with mission requirements and strategic objectives.

* Make application software and operating system configuration changes necessary to resolve trouble tickets or to comply with Sponsor requirements and IT best practices.

* Evaluating and mitigating software security vulnerabilities.

* Continuous monitoring from a security perspective.

* Obtaining Certification and Accreditation within the VDP environment.

* Executing O&M tasks as necessary to support the VDP's software and hardware infrastructure.

* Managing Windows services and devices. This experience should be related to managing a Windows based enterprise, such as maintaining Server ISOs and related

AMls, COTS updates, managing domain forests and group policy objects, user role-based authentication in active directory.

* Managing LDAP authentication with COTS applications, load balancing and gateway services related to remote desktop service deployments.

* Troubleshooting errors utilizing Event Viewer and Splunk logging.

* Must be a US Citizen

* Extensive knowledge of Best Practices for implementing the security services provided by Amazon AWS (such as Identity Management, Secure Tokens, Cloud Watch and Cloud Monitoring).

* Demonstrated experience with knowledge of security constraints and required protections for enclave accreditation in an AWS cloud.

* Demonstrated experience making virtual machine configuration changes necessary to resolve trouble tickets or to comply with security requirements and IT best practices.

* Demonstrated experience, within the last two (2) years, setting up and maintaining an AWS- cloud based VPC.

* Demonstrated experience deploying and maintaining Windows environments in AWS.

* Demonstrated experience, within the last six (6) months, managing MS Product Suite.

* Demonstrated experience, within the last six (6) months, managing MS SQL.

* Demonstrated experience, within the last six (6) months, managing MS Server 2012/2016/2019/2022.

* Demonstrated experience, within the last six (6) months, deploying and managing log aggregation systems, such as Splunk

* Demonstrated experience, within the last six (6) months, maintaining system accreditation.

* Certification(s): AWS Cloud Solutions Architect - Professional.

Desired Skills

* Understanding and implementing Multi Factor Authentication (MFA) with AWS.

* Demonstrated experience with knowledge of security constraints and required protections for enclave accreditation in an AWS cloud in the Sponsor's environment.

* Demonstrated experience with knowledge of security constraints and required protections for enclave accreditation in an AWS cloud in the VDP environment.

* Demonstrated experience making application software and operating system configuration changes necessary to resolve trouble tickets or to comply with Sponsor requirements and IT best practices.

* Demonstrated experience evaluating and mitigating software security vulnerabilities.

* Demonstrated experience with continuous monitoring from a security perspective.

* Demonstrated experience obtaining Certification and Accreditation within the Sponsor's environment.

* Demonstrated experience with the Sponsor's unique IT infrastructure and ongoing projects.

* Demonstrated experience executing O&M tasks as necessary to support the Sponsor's software and hardware infrastructure.

* Demonstrated experience understanding and implementing Multi Factor Authentication (MFA) with AWS.

* Demonstrated experiencing managing Windows services and devices. This experience should be related to managing a Windows based enterprise, such as maintaining Server ISOs and related AMls, COTS updates, managing domain forests and group policy objects, and user role-based authentication in active directory.

* Demonstrated experience managing LDAP authentication with COTS applications, load balancing and gateway services related to remote desktop service deployments.

* Demonstrated experience with troubleshooting errors utilizing Event Viewer and Splunk logging.