Solution Architect - AWS- Active TS is required (ONSITE - 100%)

Huntsville, AL
Information Technology

Visual Soft, Inc is seeking qualified candidates to work on our efforts with a Prime for their end customer, a federal agency in Huntsville, AL

Job Title: Solution Architect - AWS – Top Secret Clearance
Location: Huntsville, Alabama (100% Onsite)
Clearance Required: Active Top Secret Clearance (U.S. Citizenship Required)
Employment Type: Full-Time / Permanent/1099 Consultant
Education: Bachelor’s Degree (B.S.) in Computer Science, Information Systems, Engineering, or related field
Experience:
BS degree with 12+ years of hands-on data engineering experience

Job Description
We are seeking an experienced AWS Solutions Architect to lead the architecture, engineering, and modernization of mission-critical cloud infrastructure supporting a high-impact federal defense/intelligence customer in Huntsville, AL.

Working in direct partnership with our prime contractor and federal agency stakeholders, you will be the primary technical authority responsible for translating mission requirements into secure, highly available, and cost-optimized cloud solutions. This role requires deep, hands-on architectural expertise within classified, multi-region AWS environments (GovCloud, Secret Commercial Cloud Services, or Top Secret / C2S regions).

Key Responsibilities
Enterprise Cloud Architecture: Design, document, and oversee end-to-end cloud architectures for classified defense workloads, ensuring alignment with the AWS Well-Architected Framework and DoD Enterprise Cloud Environment guidance.
Mission Modernization: Partner with prime contractor technical leads and customer engineering teams to migrate legacy on-premises applications and bare-metal systems to containerized, microservices, and serverless AWS architectures.
Security & Compliance: Author and implement System Security Plans (SSPs) and architecture designs compliant with DoD Impact Level 5/6 (IL5/IL6), NIST SP 800-53, and FedRAMP High. Drive the technical controls required to achieve and maintain Authorizations to Operate (ATO).
Infrastructure as Code (IaC): Champion automated deployment pipelines and baseline configurations using Terraform, AWS CloudFormation, and CI/CD pipelines (GitLab CI/Jenkins) across air-gapped and disconnected environments.
Technical Leadership & Governance: Establish cloud governance models, tagging taxonomies, cross-account networking (Transit Gateway, Direct Connect, VPC peering), and cost optimization strategies.
Stakeholder Engagement: Serve as the technical advisor in customer review boards, Technical Interchange Meetings (TIMs), and engineering change reviews with both Prime and government agency leadership.

Required Qualifications
Clearance: Active U.S. Government Top Secret (TS) clearance with the ability to obtain and maintain SCI eligibility.
Work Location: Willingness and ability to work 100% onsite in Huntsville, AL (access to secure SCIF facilities).
Education: Bachelor of Science (B.S.) in Computer Science, Computer Engineering, Information Technology, Systems Engineering, or a related STEM field.
Experience: 12+ years of progressive professional experience across IT infrastructure, systems engineering, software delivery, and enterprise architecture.
Cloud Expertise: 5+ years of dedicated experience architecting, migrating, and supporting production workloads in AWS (GovCloud, SC2S, or C2S environments preferred).

Core Technical Competencies:

Advanced networking design (VPCs, Transit Gateways, Direct Connect, PrivateLink, Route 53).
Container orchestration and management (Amazon EKS, ECS, Docker, Kubernetes).
Storage and database architecture (RDS, Aurora, DynamoDB, S3 lifecycle policies).
Identity, access, and boundary protection (IAM policies, SCPs, KMS, Secrets Manager, AWS WAF, Security Groups).
Strong working proficiency with Infrastructure as Code tools (Terraform or CloudFormation).
Desired Qualifications & Certifications
Certifications (Highly Desired):
AWS Certified Solutions Architect – Professional (SAP-C02)
AWS Certified Security – Specialty (SCS-C02)
AWS Certified Advanced Networking – Specialty (ANS-C01)
DoD 8570.01-M / 8140 IAM/IAT Level III certification (CISSP, CISM, CASP+, or CCISO).
Prior experience delivering under major Prime contracts supporting DoD/Army programs (e.g., SMDC, AMRDEC/DEVCOM, MDA, or Redstone Arsenal mission partners).
Familiarity with Secure Cloud Computing Architecture (SCCA) components (Virtual Data Center Security Stack [VDSS], Virtual Data Center Managed Services [VDCMS]).
Experience configuring air-gapped container registries, zero-trust network architectures (ZTNA), and automated STIG/DISA compliance scripting.

Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all full-time employees are eligible to be part of company's profit sharing, no employee contributions required.