Cloud Architecture, Security, FinOps and Automation SME

NexGen Data Systems is seeking a Cloud Architecture, Security, FinOps and Automation SME to support DLA cloud-hosting strategy, architecture modernization, cybersecurity compliance, cost optimization, project facilitation, documentation, and process automation.

This position will support Azure, Amazon Web Services, Oracle Cloud, Google Cloud, and future classified and unclassified hosting environments. The SME will recommend architecture changes, right-size resources, apply FinOps principles, assess cloud security controls, develop policies and plans, facilitate cloud changes, automate manual processes, and mentor Government personnel.

Roles & Responsibilities:

• Advise DLA on cloud architecture, hosting models, resource usage, sizing, security, performance, resilience, and modernization.
• Develop and maintain cloud design documentation, diagrams, recommendations, and implementation strategies.
• Reengineer and refactor hosting environments to meet changing mission, processing, security, and cost requirements.
• Recommend appropriate cloud service providers, deployment models, service models, and cloud-native capabilities.
• Review cloud utilization and recommend virtual-machine right-sizing, service consolidation, device-sprawl reduction, and conversion to appropriate as-a-service offerings.
• Apply FinOps principles to identify measurable cost savings, cost avoidance, budget improvements, and resource optimization.
• Conduct cloud business-case analysis and compare cost, performance, security, and operational tradeoffs among hosting options.
• Prepare monthly Cloud Architecture and Cost Analysis Reports.
• Conduct an annual optimization review of hosted environments addressing utilization, cost, architecture, risks, security, and improvement strategies.
• Assess cloud environments against Cloud SRGs, NIST controls, FedRAMP methods, DoDIN cloud requirements, Zero Trust principles, Cloud Security Technical Reference Architecture, SCCA requirements, and approved guardrails.
• Identify cloud security and compliance gaps and recommend legally and technically compliant solutions.
• Develop monthly Cloud Security Compliance Reports.
• Support cloud Risk Management Framework documentation, Authority to Operate activities, policies, plans, Concepts of Operations, security controls, automation policy, and implementation documentation.
• Facilitate cloud project and server-tracker meetings with Government and technical personnel.
• Review and support Enterprise Change Requests and Change Implementation Plans affecting cloud-hosted environments.
• Attend Configuration Control Working Group meetings and provide technical information needed for change approval.
• Analyze existing manual processes and design automated cloud or DevOps workflows.
• Mentor Government personnel on cloud architecture, FinOps, optimization, security, industry standards, automation, and best practices.
• Maintain cloud operational documentation, SharePoint content, architecture blueprints, FinOps dashboards, security guidance, automation scripts, access records, and transition materials.

Other Duties: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.