Cloud Architect

🏢 Summary: Senior Full Stack Engineer role focused on designing and delivering secure, scalable enterprise architectures for federal modernization initiatives with emphasis on IAM and Zero Trust. The position involves leading technical implementation, developing full stack solutions, and driving cloud and identity modernization in regulated environments. Candidates must have strong experience in secure application development, cloud infrastructure, and federal security standards. 🗂️ Requirements: US Citizenship, Ability to obtain Public Trust clearance, Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity or equivalent experience, 4–6+ years of professional experience in software engineering, application development, or technical architecture, Strong backend development experience with Java, Groovy, Spring Boot, OpenJDK, GraphQL, REST APIs, Experience with MySQL and PostgreSQL, Frontend development experience with Angular, React, TypeScript, JavaScript, Hands-on experience with AWS (EKS, EC2, RDS, S3), Experience with Docker and Kubernetes, Experience with infrastructure automation tools such as Ansible, Experience with identity and security tools such as Shibboleth, CyberArk, HashiCorp Vault, Splunk, Gurucul, Tenable, Checkmarx, SonarQube, Experience with DevSecOps and CI/CD practices including Harness and GitHub Enterprise, Knowledge of SAML, OIDC, OAuth 2.0, PIV, FIPS, NIST SP 800-53, FISMA, Zero Trust Architecture, Experience designing secure, scalable enterprise applications in regulated environments 📃 Skills: Java, Groovy, Spring, OpenJDK, GraphQL, REST, MySQL, PostgreSQL, Angular, React, TypeScript, JavaScript, AWS, EKS, EC2, RDS, S3, Azure, Docker, Kubernetes, Ansible, Shibboleth, CyberArk, Vault, Splunk, Gurucul, Tenable, Checkmarx, SonarQube, Harness, GitHub, SAML, OIDC, OAuth2, PIV, FIPS, NIST, FISMA, ZeroTrust 🏢 Description: Client Requirements: applicants MUST BE US Citizens and be able to obtain Public Trust clearance The CTG Experience At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. About the Role CTG is seeking a Senior Full Stack Engineer with deep expertise in enterprise security, Identity & Access Management (IAM), and Zero Trust architecture to support high-impact federal modernization initiatives. This role will focus on designing secure, scalable enterprise architectures that align with federal security requirements while enabling mission-critical systems to evolve in a modern cloud-first environment. You Will Get To - Lead the technical approach, implementation, and overall workstream execution - Design secure enterprise architecture focused on IAM, Zero Trust, and federal compliance - Develop and customize software solutions to meet user and mission needs - Analyze application and database requirements to optimize performance and efficiency - Partner across engineering, security, and DevSecOps to deliver secure end-to-end solutions - Drive identity modernization, secure integrations, API security, and cloud modernization - Assess technical risks, architecture tradeoffs, and system dependencies - Mentor and oversee software developers while promoting engineering best practices Qualifications - Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or related field (or equivalent experience) - 4–6+ years of professional experience in software engineering, application development, or technical architecture experience - Strong backend development experience with Java, Groovy, Spring Boot, OpenJDK, GraphQL, and REST APIs - Experience working with relational databases including MySQL and PostgreSQL - Frontend development experience with Angular, React, TypeScript, and JavaScript - Hands-on experience with cloud infrastructure in AWS (EKS, EC2, RDS, S3) and exposure to Azure, particularly disaster recovery and resiliency planning - Strong experience with Docker, Kubernetes, container orchestration, and infrastructure automation tools such as Ansible - Experience with identity, authentication, and enterprise security tooling including Shibboleth, CyberArk, HashiCorp Vault, Splunk, Gurucul, Tenable, Checkmarx, and SonarQube - Strong understanding of secure application development, DevSecOps, and CI/CD practices including Harness, GitHub Enterprise, blue-green deployments, STIG hardening, and SBOM management - Knowledge of enterprise identity and security protocols including SAML, OIDC, OAuth 2.0, PIV authentication, FIPS standards, NIST SP 800-53, FISMA, and Zero Trust Architecture (ZTA) - Experience designing secure, scalable enterprise applications in regulated or compliance-driven environments - Strong documentation, technical communication, and cross-functional collaboration skills Nice to Have - Experience with IAM platforms such as Okta, Ping, SailPoint, ForgeRock, Azure AD / Entra ID, or similar - Experience supporting federal government agencies Salary We are committed to offering a competitive salary for this position, with an estimated range of $80k–$150k annually. The final offer may vary based on experience, skills, and other factors. Full Time Employee Benefits - Remote Work (Hybrid roles will be specified in the job post) - Competitive Compensation Package - Medical, Dental, and Vision - Life Insurance, Short/Long Term Disability - Employee Assistance Program - 401(k) with 4% matching - Liberal PTO vacation policy - Generous Annual Continuing Education - Annual Wellness Budget - Bonus Incentive Programs (Employee referrals and performance-based rewards)

🏢 Summary: Opportunity for a Solutions Architect III to design and lead secure, scalable, end-to-end technical architectures supporting federal modernization initiatives. The role spans application, integration, cloud, and API architecture while partnering with engineering and DevSecOps teams to deliver mission-driven solutions. Ideal for a strategic technical leader with strong enterprise and cloud experience. 🗂️ Requirements: US Citizen, Ability to obtain Public Trust clearance, Bachelor’s degree in Computer Science, Engineering, Information Systems or equivalent experience, 2+ years experience in software engineering, systems architecture, or solutions architecture, Experience designing enterprise application architectures and distributed systems, Hands-on experience with Java, Groovy, Spring Boot, OpenJDK, GraphQL, REST APIs, MySQL, PostgreSQL, Frontend architecture experience with Angular, React, TypeScript, JavaScript, Experience with AWS or Azure, Understanding of microservices, event-driven architecture, and API design, Knowledge of secure application architecture and API security 📃 Skills: Java, Groovy, Spring, OpenJDK, GraphQL, REST, MySQL, PostgreSQL, Angular, React, TypeScript, JavaScript, AWS, Azure, Kubernetes, CI/CD, DevSecOps, Microservices 🏢 Description: Capital Technology Group provides expert consulting services software development, digital transformation, human-centered design, data analytics and visualization, and cybersecurity. Our multidisciplinary teams use agile methodologies to rapidly and incrementally deliver value in close collaboration with our clients. For over a decade, we have been trusted by both federal and commercial clients to solve complex, mission-critical business challenges. The quality of our work has been recognized by our partners and peers through our inclusion in the Digital Services Coalition, a group of forward- thinking firms recognized for excellence in delivering IT services.Client Requirements: applicants MUST BE US Citizens and be able to obtain Public Trust clearance The CTG Experience At Capital Technology Group (CTG), our teams are passionate about modernizing how the federal government delivers software. We partner with federal agencies to build secure, scalable, and mission-driven solutions that make a meaningful impact on millions of people. Recognized as a 2025 Top Workplace by The Washington Post, CTG fosters a culture rooted in our core values. Our values guide how we work together and support one another, creating an environment where employees feel trusted, empowered, and encouraged to grow both personally and professionally. About the Role CTG is seeking a Solutions Architect III to design and lead scalable, secure, mission-driven technical solutions supporting federal modernization initiatives. This role focuses on end-to-end solution architecture across applications, integrations, cloud environments, APIs, and enterprise systems while partnering closely with engineering, product, infrastructure, and delivery teams. You Will Get To Design end-to-end technical solutions across applications, integrations, cloud infrastructure, and enterprise platforms Translate business, product, and mission requirements into scalable architecture strategies Partner with engineering, DevSecOps, infrastructure, and product teams to drive solution design and delivery Lead architecture discussions, technical design reviews, and solution decision-making Define architecture standards, reusable design patterns, and engineering best practices Guide API architecture across REST and GraphQL services Design scalable application integration patterns, interoperability strategies, and data flows Support modernization, cloud transformation, and enterprise platform initiatives Evaluate technical risks, architecture tradeoffs, dependencies, and implementation approaches Ensure solutions align with security, compliance, performance, and scalability requirements Mentor engineering teams and provide architectural leadership across programs Who You Are A strategic technical leader who enjoys designing complex systems and solving architecture challenges Strong in application architecture, systems integration, and modern cloud-based solution design Comfortable balancing business needs with technical constraints and long-term architecture strategy A strong communicator who can influence stakeholders across technical and non-technical teams Collaborative, proactive, and comfortable navigating ambiguity Qualifications Bachelor's degree in Computer Science, Engineering, Information Systems, or related field (or equivalent experience) 2+ years of professional experience in software engineering, systems architecture, or solutions architecture roles Strong experience designing enterprise application architectures and scalable distributed systems Deep hands-on experience with Java, Groovy, Spring Boot, OpenJDK, GraphQL, REST APIs, MySQL, and PostgreSQL Strong frontend architecture experience with Angular, React, TypeScript, and JavaScript Strong understanding of application integration, API design, microservices, event-driven architecture, and enterprise solution patterns Experience with cloud platforms such as AWS or Azure Familiarity with DevSecOps workflows, CI/CD pipelines, infrastructure collaboration, and modern delivery practices Knowledge of secure application architecture, API security, and enterprise design best practices Strong documentation, architecture communication, and stakeholder leadership skills Nice to Have Experience with containerization, Kubernetes, serverless architecture, or platform engineering Familiarity with Zero Trust principles, IAM integrations, or enterprise security architecture Experience supporting federal government agencies Salary We are committed to offering a competitive salary for this position, with an estimated range of $75k–$110k annually. Please note that this range is intended to provide a general idea of what to expect. The final offer may vary based on experience, skills, and other factors. Full Time Employee Benefits Remote Work (Hybrid roles will be specified in the job post) Competitive Compensation Package Medical, Dental, and Vision Life Insurance, Short/Long Term Disability Employee Assistance Program 401(k) with 4% matching Liberal PTO vacation policy Generous Annual Continuing Education Annual Wellness Budget Bonus Incentive Programs (Employee referrals and performance-based rewards) Thanks for your interest in Capital Technology Group! Capital Technology Group is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

🏢 Summary: Hybrid Azure Cloud Engineer role supporting federal IT environments with a focus on secure Azure infrastructure, Terraform-based IaC, GitLab CI/CD, automation, and Azure Virtual Desktop. The position involves cloud modernization, compliance with federal security frameworks, and onsite collaboration in Washington, D.C. Active Secret clearance and strong Azure, Terraform, and DevOps experience are required. 🗂️ Requirements: Active Secret clearance or higher, U.S. citizenship, 3+ years Azure Cloud Engineering experience, 3+ years CI/CD pipeline experience, 3+ years Terraform experience, 3+ years GitLab experience, 4+ years PowerShell scripting experience, 5+ years Cloud Engineering, DevOps, or Systems Engineering experience, Experience with Azure core services and architecture, Experience with Azure networking, Experience with Azure Virtual Desktop, Knowledge of FedRAMP, NIST, and RMF, Ability to work onsite in Washington, D.C. 4 days/week 📃 Skills: Azure, Terraform, GitLab, PowerShell, Bash, YAML, JSON, AVD, FSLogix, AzureAD, M365, CI/CD, VNets, NSG, VPN, ExpressRoute, RBAC, KeyVault, IAM, FedRAMP, NIST, RMF, LogAnalytics, Docker, Kubernetes, AKS, FinOps 🏢 Description: LightFeather is seeking an Azure Cloud Engineer to design, implement, and manage secure cloud solutions for federal IT environments. The role supports Azure infrastructure, automation, and security initiatives while applying DevOps best practices to improve performance, compliance, and operational efficiency. Location: Hybrid, on-site 4 days/week in Washington, D.C. 20006 and 1 day telework Job Type: Full-time Salary: $130,000–$170,000 annually, based on experience level Clearance Requirement: U.S. citizenship required due to federal contract requirements and ability to obtain and maintain a Secret-level security clearance Quick Facts - Hybrid role with on-site collaboration required - Federal cloud engineering and modernization environment - Focus on Azure, Terraform, GitLab CI/CD, and Azure Virtual Desktop - Compliance-driven environment aligned with federal standards Key Responsibilities - Design, deploy, and maintain Azure cloud infrastructure including VMs, VNets, Storage, Azure AD, and PaaS services - Manage and optimize Azure networking components including VNets, NSGs, Load Balancers, and VPN/ExpressRoute connectivity - Develop and maintain Terraform templates as the primary Infrastructure as Code tool - Support automation using PowerShell, Bash, YAML/JSON, and GitLab pipelines - Deploy, configure, and manage Azure Virtual Desktop environments including host pools, session hosts, FSLogix profile containers, and Azure AD/M365 integrations - Troubleshoot and optimize Azure Virtual Desktop user performance - Build, maintain, and troubleshoot CI/CD pipelines in GitLab - Automate cloud operations, system configuration, and monitoring tasks - Implement secure cloud practices aligned with federal requirements including RBAC, Key Vault, IAM, and encryption standards - Ensure compliance with NIST, RMF, FedRAMP, and agency-specific controls - Use Azure Monitor, Log Analytics, and related tools to analyze system health, diagnose issues, and enforce SLAs - Collaborate with engineering, security, and program teams on cloud modernization efforts - Support onsite collaboration with customer stakeholders Required Qualifications - Active Secret or higher clearance - 3+ years of Azure Cloud Engineering experience - 3+ years of CI/CD pipeline experience - 3+ years of Terraform experience for Infrastructure as Code - 3+ years of GitLab experience - Minimum 4 years of PowerShell scripting experience - 5+ years of Cloud Engineering, DevOps, or Systems Engineering experience - Strong hands-on experience with Microsoft Azure core services and architecture - Proficiency with Terraform, PowerShell, and GitLab CI/CD - Experience supporting Azure networking including VNets, routing, NSGs, and VPN/ExpressRoute - Hands-on experience with Azure Virtual Desktop in production environments - Understanding of federal cloud security frameworks including FedRAMP, NIST, and RMF - Ability to work onsite in Washington, D.C. four days per week Preferred Qualifications - Experience supporting DoD or federal agency cloud environments - Experience with Docker, Kubernetes, or AKS - Experience with Azure serverless tools including Functions, Logic Apps, and Event Grid - Experience with Azure Cost Management or FinOps practices Benefits and Additional Information - Opportunity to work on mission-critical federal cloud modernization projects - Collaborative environment with engineering, security, and program teams - Equal Opportunity Employer

🏢 Summary: Remote Cyber Security Engineer role supporting VA healthcare modernization initiatives focused on AWS cloud security, RMF/ATO compliance, Zero Trust, and federal cybersecurity engineering. The position involves securing enterprise healthcare systems, supporting DevSecOps and compliance workflows, and collaborating across technical teams in regulated federal environments. 🗂️ Requirements: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, 5+ years of cybersecurity engineering experience in federal, cloud, healthcare, or regulated environments, Experience securing AWS cloud environments, Hands-on experience with AWS security services, Experience with RMF, ATO, continuous monitoring, and federal compliance, Familiarity with eMASS, ServiceNow GRC, or similar systems, Experience developing SSPs, POA&Ms, SOPs, risk assessments, and remediation plans, Knowledge of NIST RMF, NIST SP 800-53, FISMA, FedRAMP, and Zero Trust, Knowledge of DISA STIGs, system hardening, and vulnerability remediation, Familiarity with DevSecOps, secure SDLC, CI/CD security, and automated security scanning, Ability to obtain and maintain a Public Trust 📃 Skills: AWS, IAM, Encryption, CloudWatch, CloudTrail, GuardDuty, Inspector, Firewall, eMASS, ServiceNow, RMF, ATO, NIST, FISMA, FedRAMP, STIG, DevSecOps, CI/CD, Kubernetes, HL7, FHIR, MUMPS, VistA, CPRS, CISSP, Security+, CEH, CCSP 🏢 Description: Location: Remote (U.S.) Clearance: Ability to obtain and maintain a Public Trust Salary Range: 100K – 120K LTS is seeking a skilled and mission-focused Cyber Security Engineer to support a major modernization initiative within the Department of Veterans Affairs (VA) health portfolio. This role will support cybersecurity engineering, risk management, and security modernization efforts across enterprise healthcare systems and infrastructure environments supporting Veteran healthcare operations nationwide. The ideal candidate will possess strong experience securing complex federal IT systems, supporting cloud and hybrid environments, and implementing cybersecurity solutions aligned with federal compliance frameworks and Zero Trust initiatives. This individual will work closely with infrastructure, application, integration, and DevSecOps teams to ensure modernization efforts are designed and deployed with security at the forefront. What You'll Do: • Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring. • Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening. • Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities. • Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment. • Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows. • Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation. • Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control narratives, security diagrams, and remediation plans. • Support vulnerability assessments, DISA STIG hardening, configuration compliance reviews, remediation tracking, and audit readiness activities. • Integrate security requirements into architecture, sprint planning, CI/CD processes, testing, and deployment readiness. • Support security reviews for VIA platform capabilities, including data handling, access control, auditability, secure integration, and AI-enabled modernization workflows. • Collaborate with technical and non-technical stakeholders to translate security requirements into practical engineering, documentation, and compliance actions. What We're Looking For: • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field. • 5+ years of cybersecurity engineering experience supporting federal, cloud, healthcare, or other regulated environments. • Experience securing AWS cloud environments, including IAM, encryption, logging, monitoring, network security, and vulnerability management. • Hands-on experience with AWS security services such as Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, AWS Network Firewall, or similar capabilities. • Experience supporting RMF, ATO, continuous monitoring, risk management, and federal compliance activities. • Familiarity with eMASS, ServiceNow GRC, or similar risk management and authorization systems. • Experience developing or supporting SSPs, POA&Ms, SOPs, control narratives, risk assessments, evidence packages, and remediation plans. • Working knowledge of NIST RMF, NIST SP 800-53 controls, FISMA, FedRAMP, Zero Trust, and federal cybersecurity requirements. • Knowledge of DISA STIGs, secure configuration baselines, system hardening, and vulnerability remediation processes. • Familiarity with DevSecOps, secure SDLC practices, automated security scanning, CI/CD security, and environment hardening. • Strong communication, documentation, analytical, and problem-solving skills. Nice to Have: • Experience supporting AWS GovCloud, federal cloud migration, or Commercial-to-GovCloud transition planning. • Prior experience supporting VA systems, VA cloud environments, or VA healthcare modernization initiatives. • Familiarity with VistA, CPRS, MUMPS, or legacy healthcare application modernization. • Experience securing AI-enabled, automation-based, or agentic platforms in regulated environments. • Experience supporting FedRAMP Moderate or High environments. • Experience with container security, Kubernetes, infrastructure as code, or cloud-native security architectures. • Knowledge of healthcare interoperability standards such as HL7, FHIR, APIs, or healthcare data exchange. • Relevant certifications such as CISSP, Security+, CEH, CCSP, AWS Security Specialty, AWS Solutions Architect, or similar. LTS shares salary ranges to promote transparency. Compensation ranges are provided for informational purposes, and final compensation may vary based on experience, skills, location, and role requirements. LTS is committed to offering eligible employees comprehensive benefits that will provide them with options intended to meet their needs and the needs of their family.

🏢 Summary: Senior Cloud Engineer role focused on designing, implementing, and supporting secure Microsoft cloud and hybrid infrastructure solutions across Azure, Microsoft 365, and GCC High environments. The position combines hands-on engineering, technical leadership, and compliance-driven architecture in complex enterprise settings. The engineer will lead cloud security, identity management, endpoint management, and Azure Virtual Desktop initiatives. 🗂️ Requirements: 8+ years of experience in cloud engineering, systems engineering, or enterprise infrastructure, Strong hands-on experience with Microsoft 365 administration and security, Proven experience working within GCC High or regulated cloud environments, Deep expertise with Microsoft Intune for device and application management, Strong proficiency with Azure infrastructure (VMs, VNets, NSGs, Storage, Key Vault, Monitoring, Automation), Experience deploying and supporting Azure Virtual Desktop, Solid background in Windows Server and enterprise infrastructure, Strong understanding of identity management using Microsoft Entra ID, Ability to design secure, scalable, and compliant cloud architectures 📃 Skills: Azure, Microsoft365, GCCHigh, Intune, AzureVirtualDesktop, WindowsServer, ActiveDirectory, DNS, DHCP, GroupPolicy, EntraID, ConditionalAccess, MFA, SSO, ExchangeOnline, Teams, SharePoint, PowerShell, AzureCLI, Bicep, Terraform, Linux, FSLogix, KeyVault, NSG, VNet 🏢 Description: Senior Cloud Engineer We are seeking a Senior Cloud Engineer who brings deep Microsoft cloud expertise and thrives in secure, complex environments. The Senior Cloud Engineer will design, implement, and support cloud and hybrid infrastructure solutions across Microsoft 365, Azure, and GCC High environments. This role requires strong technical leadership, hands-on engineering capability, and the ability to collaborate with cross-functional teams to deliver secure, scalable, and compliant cloud solutions. Key Responsibilities - Architect, deploy, and manage Azure infrastructure including compute, networking, storage, identity, and security services. - Administer and optimize Microsoft 365 workloads, including Exchange Online, Teams, SharePoint, and security/compliance features. - Support and maintain GCC High (Government Community Cloud) environments, ensuring adherence to federal compliance and security requirements. - Lead configuration, policy development, and lifecycle management in Microsoft Intune (Endpoint Manager) for Windows, iOS, and Android devices. - Design, deploy, and support Azure Virtual Desktop (AVD) environments, including image management, FSLogix, scaling, and performance tuning. - Manage and maintain server infrastructure (Windows Server, AD DS, DNS, DHCP, Group Policy) in hybrid environments. - Administer and enhance identity and access management using Microsoft Entra ID, including Conditional Access, MFA, SSO, and identity governance. - Implement cloud security best practices, monitoring, and compliance controls across Azure and M365. - Troubleshoot complex cloud, identity, and infrastructure issues across hybrid environments. - Develop documentation, runbooks, and operational standards for cloud services. Required Qualifications - 8+ years of experience in cloud engineering, systems engineering, or enterprise infrastructure roles. - Strong hands-on experience with Microsoft 365 administration and security. - Proven experience working within GCC High or other regulated cloud environments. - Deep expertise with Microsoft Intune for device and application management. - Strong proficiency with Azure infrastructure (VMs, VNets, NSGs, Storage, Key Vault, Monitoring, Automation). - Experience deploying and supporting Azure Virtual Desktop. - Solid background in Windows Server and enterprise infrastructure. - Strong understanding of identity management using Microsoft Entra ID. - Ability to design secure, scalable, and compliant cloud architectures. Nice to Have - Experience with Linux (Ubuntu, RHEL, or similar). - Certifications such as: AZ-104: Microsoft Azure Administrator, SC-300: Identity and Access Administrator. - Experience with automation tools (PowerShell, Azure CLI, Bicep, Terraform). - Familiarity with Zero Trust principles and cloud security frameworks. Soft Skills - Strong communication and documentation skills. - Ability to lead technical initiatives and mentor junior engineers. - Consulting mindset with the ability to work independently in a remote environment. Benefits Health & Wellness: Medical (BC-BS), dental, and vision plans. Paid Time Off: Generous PTO, paid holidays, and increasing PTO based on years of service. Retirement Savings: 401(k) plan with company match and auto-enrollment. Company-Paid Coverage: Short-term and long-term disability, life insurance, and AD&D insurance. Additional Options: Voluntary benefits including pet insurance and student loan assistance up to $1,000 annually. Perks: FSAs, HSAs, wellness programs, and more to enhance work-life balance.

🏢 Summary: Azure Cloud/DevOps Engineer role supporting secure federal cloud environments with a focus on Azure infrastructure, Terraform-based IaC, GitLab CI/CD, and Azure Virtual Desktop. The position involves cloud automation, networking, compliance, and DevOps operations in a hybrid on-site Washington, D.C. setting requiring a Secret clearance. 🗂️ Requirements: Active Secret clearance, U.S. citizenship, 3+ years Azure Cloud Engineering experience, 3+ years CI/CD pipeline experience, 3+ years Terraform experience, 3+ years GitLab experience, 4+ years PowerShell scripting experience, 5+ years Cloud Engineering, DevOps, or Systems Engineering experience, Experience with Azure core services and architecture, Experience with Azure networking, Experience with Azure Virtual Desktop, Knowledge of FedRAMP, NIST, and RMF, Ability to work on-site in Washington, D.C. 4 days/week 📃 Skills: Azure, Terraform, GitLab, PowerShell, Bash, YAML, JSON, AVD, FSLogix, AzureAD, M365, CI/CD, VNets, NSGs, VPN, ExpressRoute, RBAC, KeyVault, IAM, FedRAMP, NIST, RMF, LogAnalytics, Docker, Kubernetes, AKS, FinOps 🏢 Description: LightFeather is seeking a Azure Cloud/DevOps Engineer design, implement, and manage secure cloud solutions for federal IT environments. You'll play a key role in supporting Azure infrastructure, automation, and security, applying DevOps best practices to drive performance, strengthen compliance, and improve operational efficiency. Salary: $130,000–$170,000 annually, based on experience level. Clearance Requirement: U.S. citizenship is required for this position due to federal contract requirements and the need to obtain and maintain a Secret-level security clearance. Key Responsibilities - Design, deploy, and maintain Azure cloud infrastructure including VMs, VNets, Storage, Azure AD, and PaaS services. - Manage and optimize Azure networking components (VNets, NSGs, Load Balancers, VPN/ExpressRoute connectivity). - Develop and maintain Terraform templates as the primary IaC tool. - Support automation via PowerShell, Bash, YAML/JSON, and GitLab pipelines. - Deploy, configure, and manage AVD environments including host pools, session hosts, FSLogix profile containers, and Azure AD/M365 integrations. - Provide troubleshooting and performance optimization for AVD users. - Build, maintain, and troubleshoot CI/CD pipelines in GitLab. - Automate cloud operations, system configuration, and monitoring tasks. - Implement secure cloud practices aligned with federal requirements (RBAC, Key Vault, IAM, encryption standards). - Ensure compliance with NIST, RMF, FedRAMP, and agency-specific controls. - Use Azure Monitor, Log Analytics, and related tools to analyze system health, diagnose issues, and enforce SLAs. - Work with engineering, security, and program staff to support ongoing cloud modernization efforts. - Support onsite collaboration with customer stakeholders. Required Qualifications - Active Secret or higher clearance - 3+ years of experience with Azure Cloud Engineering - 3+ years of experience with CI/CD pipelines - 3+ years of experience using Terraform for IaC - 3+ years of experience using GitLab - Minimum of 4 years experience with PowerShell scripting - 5+ years of experience in Cloud Engineering, DevOps, or Systems Engineering - Strong hands-on experience with Microsoft Azure core services and architecture - Proficiency with Terraform, PowerShell, and GitLab CI/CD - Experience supporting Azure networking (VNets, routing, NSGs, VPN/ExpressRoute) - Hands-on experience with Azure Virtual Desktop (AVD) in production environments - Understanding of federal cloud security frameworks (FedRAMP, NIST, RMF) - Ability to work on-site in Washington, DC four days per week Preferred Qualifications - Experience supporting DoD or federal agency cloud environments - Experience with Docker/Kubernetes (AKS) - Azure serverless tools (Functions, Logic Apps, Event Grid) - Cost optimization using Azure Cost Management / FinOps practices LightFeather is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or any other status protected by applicable federal, state, or local law.

🏢 Summary: Design and deliver scalable cloud and hybrid IT architecture solutions with a focus on Microsoft-based infrastructures. Lead cloud transformation and migration initiatives while ensuring alignment with IT security standards. Provide architectural guidance and technical support across project delivery. 🗂️ Requirements: Hands-on experience with Azure Cloud, Hands-on experience with GCP Cloud, Experience designing infrastructure solutions based on Microsoft technologies, Knowledge of IT Security principles and best practices, Experience in cloud transformation and migration projects, English level C1, Work permit in the European Union 📃 Skills: Azure, GCP, AWS, Microsoft, ITSecurity, MDM, Cloud, Infrastructure, Architecture 🏢 Description: 🟣 You will be: designing and developing scalable IT architecture solutions across cloud and hybrid environments, building and maintaining infrastructure solutions based on Microsoft technologies and ecosystem, collaborating with technical teams and business stakeholders to gather requirements and recommend optimal solutions, participating in cloud transformation and migration projects, ensuring solutions align with IT Security best practices and standards, providing architectural guidance and technical support throughout project delivery. 🟣 Your profile: strong hands-on experience with: Azure Cloud GCP Cloud good understanding of IT Security principles and best practices, experience designing and implementing infrastructure solutions based on Microsoft technologies and tools, English - C1, 🟣 Nice to have: experience with AWS Cloud, endpoint Management / MDM skills. Work from the European Union region and a work permit are required. 🟣 Recruitment Process: CV review – HR Call – Technical Interview – Decision 🎁 Benefits 🎁 ✍ Development: development budget of up to 6,800 PLN, we fund certifications e.g.: AWS, Azure, ISTQB, PSM, access to Udemy, Safari Books Online and more, events and technology conferences, technology Guilds, internal training, Xebia Library, Xebia Upskill. 🩺 We take care of your health: private medical healthcare, multiSport card - we subsidise a MultiSport card, mental Health Support. 🤸‍♂️ We are flexible: flexible working hours, contract for an indefinite period.

🏢 Summary: Cloud Infrastructure Architect role focused on designing and standardizing scalable, secure Azure environments using Infrastructure-as-Code and automation. The position drives architectural excellence, leads automation with Terraform and Terragrunt, and supports rapid environment deployment initiatives. It also emphasizes FinOps-driven optimization and cost-efficient cloud architecture. 🗂️ Requirements: Minimum 3+ years experience in Azure Cloud Engineering or Architecture, Expert knowledge of Terraform, Hands-on experience with Terragrunt, Proven experience with Ansible for automation, Experience designing Azure compute, networking, storage, and security solutions, Experience managing multi-subscription Azure environments, Practical knowledge of FinOps and cloud cost optimization, Ability to design scalable and secure Infrastructure-as-Code solutions 📃 Skills: Azure, Terraform, Terragrunt, Ansible, FinOps, IaC, Compute, Networking, Storage, Security 🏢 Description: Role Overview We are seeking a seasoned Cloud Infrastructure Architect with a minimum of 3 years of hands-on experience in high-scale Azure environments. In this role, you will be a key driver in architectural excellence, responsible for building standardized infrastructure patterns, supporting high-impact initiatives like the "Demo Factory," and leading strategic optimization efforts. You will bridge the gap between complex solution design and automated execution. Key Responsibilities Infrastructure Pattern Development: Design and implement reusable, scalable, and secure Infrastructure-as-Code (IaC) patterns to be consumed across various customer projects. Automation & Orchestration: Lead the automation strategy using Terraform and Terragrunt to ensure DRY ( Don't Repeat Yourself ) principles and maintainable code across multi-subscription environments. Configuration Management: Utilize Ansible to automate software provisioning, configuration management, and application deployments. Cloud Architecture: Architect end-to-end Azure solutions that align with industry best practices and specific customer business requirements. FinOps & Optimization: Drive cloud efficiency by implementing FinOps methodologies—analyzing cloud spend, optimizing resource utilization, and ensuring cost-effective architectural decisions. Initiative Support: Act as a technical lead for the "Demo Factory," ensuring rapid, automated deployment of pre-configured environments for stakeholders. Technical Profile Experience: Minimum 3+ years of professional experience in Azure Cloud Engineering/Architecture. IaC Mastery: Expert-level knowledge of Terraform and significant experience with Terragrunt for managing infrastructure at scale. Configuration Tools: Proven track record of using Ansible for complex automation tasks. Architectural Depth: Strong ability to design Azure solutions (compute, networking, storage, and security) with a focus on stability and scalability. Financial Intelligence: Practical understanding of FinOps (Cost Management, Reserved Instances, Savings Plans, and Rightsizing). Soft Skills: Ability to translate business needs into technical blueprints and communicate effectively with both technical teams and business stakeholders.

🏢 Summary: Senior Cloud Engineer role focused on designing, building, and supporting secure, high-availability cloud environments across AWS, Azure, and GCP using automation, IaC, CI/CD, and DevSecOps practices. The position involves modernizing workloads, implementing cloud infrastructure, containerization, observability, and cost optimization while collaborating within cross-functional delivery teams. 🗂️ Requirements: 6-10 years of cloud engineering experience, Bachelor’s degree in Computer Science or similar, Experience with AWS, Azure, or GCP, Proficiency with Terraform or equivalent IaC tool, Knowledge of at least one scripting language, Experience with CI/CD pipelines, Experience integrating DevSecOps controls, Knowledge of container runtime fundamentals, Familiarity with monitoring and observability stacks, Understanding of incident-management processes, Cloud certification in AWS, Azure, or GCP, Experience with serverless services, Knowledge of event-driven architectures, Understanding of microservice patterns, Knowledge of compliance frameworks, Experience with security hardening, Strong troubleshooting and documentation skills, Customer-facing communication skills 📃 Skills: AWS, Azure, GCP, Terraform, CI/CD, DevSecOps, IaC, Docker, Kubernetes, Lambda, SNS, SQS, EventHub, PubSub, SOC2, HIPAA, PCI 🏢 Description: About the Role Our Cloud Engineers design, build, and support secure, high-availability cloud environments that power customer transformation initiatives. Working within cross-functional delivery teams, you’ll apply best-practice automation (IaC, CI/CD, DevSecOps) to migrate, modernize, and optimize workloads on AWS, Azure, and/or Google Cloud while meeting performance, security, and cost-efficiency targets. Key Responsibilities - Implement landing zones, VPC/VNet networking, IAM, and security baselines. - Provision and configure compute, storage, and database services using IaC. - Develop and maintain pipeline automation for application and infrastructure deployments. - Design and package applications with modern containerization and orchestration. - Configure logging, metrics, tracing, and alerting while applying SRE practices. - Produce cost-and-capacity reports with FinOps tooling. - Produce well-structured design documents, diagrams, and hand-over guides. Qualifications - 6-10 years experience in cloud solutions on at least one CSP (AWS, Azure, GCP). - Bachelor’s degree in Computer Science or similar. - Proficiency with Terraform or equivalent IaC tool and one scripting language. - Working knowledge of container runtime fundamentals. - Experience building CI/CD pipelines and integrating DevSecOps controls. - Familiarity with monitoring/observability stacks and incident-management processes. - Strong troubleshooting, documentation, and customer-facing communication skills. - Cloud certifications on at least one CSP (AWS, Azure, GCP). - Experience with serverless services (Lambda, Cloud Functions), event-driven architectures (SNS/SQS, Event Hub, Pub/Sub), and microservice patterns. - Knowledge of compliance frameworks (SOC 2, HIPAA, PCI) and security hardening. - Exposure to data-platform services and AI/ML tooling. Benefits - Investment in employee growth and development. - Empowering leadership focused on removing roadblocks. - Flat organizational structure with direct technical impact. - Opportunity to work with modern cloud technologies on real-world problems. - Collaborative culture that values learning and innovation. - Compensation range: $145K - $165K.

🏢 Summary: 12-month remote B2B contract for a Cloud Engineer to design, implement, and operate scalable infrastructure and distributed storage across hybrid and cloud-native environments. The role focuses on automation, reliability, and performance optimization of critical infrastructure services. 🗂️ Requirements: Experience with distributed storage technologies (Weka, Qumulo, Ceph), Experience with Kubernetes and containerized platforms, Knowledge of HashiCorp Vault or similar secrets management solutions, Experience with Site Reliability Engineering (SRE) practices, Hands-on experience with Infrastructure-as-Code tools (Terraform, Ansible), Experience with CI/CD pipelines and automation, Knowledge of monitoring, logging, and observability platforms, Experience working with Linux-based infrastructure environments 📃 Skills: Weka, Qumulo, Ceph, Kubernetes, Vault, Terraform, Ansible, CI/CD, Linux, SRE, Monitoring, Logging, Observability, Automation, Containers, Hybrid, Cloud-native 🏢 Description: Summary: The Cloud Engineer will be responsible for designing, implementing, operating, and continuously improving modern infrastructure and storage platforms across hybrid and cloud-native environments. This role focuses on building reliable, scalable, and secure infrastructure services that support critical business and research workloads. What we offer: Contract Length: 12 months Type of contract: B2B Contract Work Model: Remote Budget: 32-35 euro Responsibilities: Design, implement, and operate infrastructure services across hybrid and cloud-native environments. Continuously improve infrastructure and storage platforms. Perform platform operations, automation, and performance optimization. Handle troubleshooting and capacity planning tasks. Contribute to the reliability and resilience of infrastructure services. Collaborate across teams to drive stability and scalability. Key Requirements: Experience with distributed storage technologies such as Weka, Qumulo, and Ceph. Experience with Kubernetes and containerized platforms. Knowledge of secrets management solutions such as HashiCorp Vault. Experience with Site Reliability Engineering (SRE) methodologies. Infrastructure-as-Code (IaC) experience (e.g. Terraform, Ansible). Experience with CI/CD pipelines and automation. Knowledge of monitoring, logging, and observability platforms. Experience working with Linux-based infrastructure environments. Experience with scripting/programming for automation (e.g. Python, Bash, Go) is beneficial. Nice to Have: Understanding of data privacy, data protection, and information security principles. Experience handling sensitive and regulated data in enterprise environments. Awareness of GDPR and other applicable data privacy regulations. Ability to follow operational and security governance procedures.