Cloud Architect | AWS Landing Zone & Migration (CMMC / .NET Modernization)

We are working with a highly regulated, CMMC Compliant environment. We are seeking only US Citizens for consideration for this role. About the project We're migrating a Microsoft-based infrastructure (IIS-hosted .NET apps, SQL Server, Angular frontends) from on-premises to AWS using a Balanced Modernization approach: containerizing suitable workloads to ECS/Fargate, migrating databases to RDS SQL Server Multi-AZ, hosting static frontends on S3 + CloudFront, and standing up an AWS Landing Zone Accelerator (LZA) foundation aligned to CMMC Level Two and NIST SP eight hundred dash one seventy one. There is already a partial AWS footprint (Organizations, Control Tower, Entra ID integration). We need a hands-on Cloud Architect to own the architecture, governance design, and migration roadmap, and to lead a low-risk Wave One pilot of five applications. What you'll do • Run environment discovery and validation across compute, storage, networking, identity, and SQL Server. • Define the target AWS architecture: multi-account/OU structure, VPC and Transit Gateway networking, hybrid connectivity (VPN/Direct Connect), and a multi-region disaster recovery design in AWS. • Design the LZA deployment and governance model (SCPs, guardrails, centralized logging) tuned for CMMC Level Two and NIST SP eight hundred dash one seventy one. • Plan migration waves and define migration patterns (containerize to ECS/Fargate, RDS SQL Server Multi-AZ, S3/CloudFront for SPAs). • Identify containerization candidates, design the OIDC/identity approach (IAM Identity Center + Entra ID SSO), and validate dependencies. • Produce a directional AWS cost model and modernization recommendations. • Provide architectural oversight to the Cloud Engineer through the build and Wave One migration. Required skills • 8+ years cloud/infrastructure, with deep, current AWS architecture experience (AWS Solutions Architect, Professional strongly preferred). • AWS Landing Zone Accelerator, AWS Organizations, Control Tower, multi-account governance. • ECS/Fargate, RDS SQL Server (Multi-AZ), S3/CloudFront, ALB/NLB, Route 53. • Networking: VPC design, Transit Gateway, hybrid connectivity, DNS, segmentation. • CMMC Level Two and NIST SP eight hundred dash one seventy one alignment in AWS environments. • Infrastructure-as-Code with CloudFormation; familiarity with CI/CD (GitHub Actions). • Strong client-facing communication; able to lead working sessions and produce clear deliverables. Nice to have • Experience migrating .NET (Framework and modern .NET) and IIS workloads to containers. • DoD / CUI handling and regulated-workload experience. Engagement details • Roughly 350 to 370 hours over ~10 weeks. Full-time during the 2-week Assess phase, then partial allocation (~50 to 100%) through the 8-week Mobilize and pilot phase. • Remote. To apply Please include: (a) a short note on a comparable AWS landing zone or migration you led, (b) your relevant AWS certifications, (c) your CMMC/NIST experience, and (d) your hourly rate and weekly availability over the next 10 weeks. Immediate joiners preferred. Proof of US Citizenship is required upon joining.