Senior multi-cloud architect

Leidos seeks a Senior Multi-Cloud Architect to provide hands-on technical leadership for secure, resilient, cost-effective applications and cloud services supporting the Centers for Medicare & Medicaid Services (CMS), including Medicare, Medicaid, and Marketplace applications. Working across AWS, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure (OCI), you will translate mission, security, and operational needs into implementable architectures and lead their adoption with application and platform teams.

As a senior technical individual contributor, you will own the quality of assigned architecture deliverables and recommendations within program governance. You will partner with CMS Application Development Organizations (ADOs), CMS Hybrid Cloud product teams, and Enterprise Shared Service teams to modernize applications, resolve complex cross-platform problems, and deliver measurable improvements in reliability, security, performance, delivery efficiency, and cost.

Primary responsibilities

• Architecture leadership. Assess current-state architectures and define target-state designs, transition roadmaps, architecture decision records, and reusable reference patterns. Lead design reviews and document trade-offs, dependencies, risks, and exceptions within established CMS and program governance.
• Multi-cloud design. Select cloud services and workload placement based on mission fit, security, reliability, data needs, cost, and operating complexity. Design hybrid and cross-cloud integration, identity, networking, and shared services without imposing unnecessary provider parity.
• Application partnership. Serve as a trusted technical advisor to ADOs; translate application requirements into prioritized modernization plans with clear ownership and acceptance criteria. Coordinate implementation across cloud, application, security, testing, and operations teams.
• Hands-on implementation. Build and review reusable infrastructure-as-code modules, automation, and reference implementations. Define secure CI/CD patterns with automated testing, policy checks, artifact controls, and rollback; validate critical designs through prototypes and production delivery.
• Security and compliance. Embed least privilege, identity federation, segmentation, encryption, secrets management, and auditability into designs. Partner with security stakeholders on applicable FISMA, NIST SP 800-53, CMS ARS, and FedRAMP requirements, including control responsibilities and authorization evidence.
• Reliability and operations. Define service-level objectives and recovery time and recovery point objectives with application owners. Design observability, failure isolation, backup, recovery, and safe change practices; validate resilience through testing and operational-readiness reviews.
• Cost and lifecycle management. Evaluate total cost of ownership, utilization, performance, and lifecycle risks. Prioritize remediation, upgrades, technical-debt reduction, and cost optimization with measurable results and explicit security and reliability trade-offs.
• Technical leadership. Mentor engineers and provide technical direction across vendors and teams. Lead complex troubleshooting and post-incident improvements; establish documentation, runbooks, and support transitions that enable sustainable operations and clear accountability.

Please be advised that if you are moved to the interview stage, during the interview you will be required to keep your camera on, and your interviewer will be taking your picture for identification purposes if an offer letter is extended to you.

Education and experience

Bachelor's degree and 12 or more years of relevant experience, or a master's degree and 10 or more years of relevant experience. Additional years of experience may be substituted in lieu of degree.

Eligibility and background investigation

Candidates must be able to obtain and maintain a favorable Public Trust determination and meet the program's stated requirement to have resided in the United States for at least three of the previous five years.

Required qualifications

• Architecture delivery. Demonstrated ownership of complex production cloud architectures from requirements and design through implementation and operational validation, with evidence of outcomes, constraints, and trade-offs.
• Multi-cloud depth. Deep production architecture and implementation experience in at least two of AWS, Azure, and Google Cloud, with the ability to evaluate services and architecture trade-offs across all three. OCI experience is preferred.
• Core architecture. Ability to design hybrid/cloud networking, identity and access controls, compute, storage and data services, integration, resilience, and observability; select appropriately among containers, serverless, virtual machines, and managed services.
• Hands-on engineering. Hands-on experience developing and reviewing production-quality infrastructure as code using Terraform or equivalent; engineering Kubernetes and managed container platforms; and implementing secure CI/CD. Proficiency in at least one general-purpose programming language and shell scripting.
• Security and compliance. Experience designing or modernizing FISMA-regulated systems and translating security requirements into implemented, testable controls and evidence. Working knowledge of NIST SP 800-53, shared responsibility, and cloud authorization boundaries.
• Operational and economic judgment. Experience validating recovery and performance, diagnosing complex production failures, and making quantified cost, reliability, security, and maintainability trade-offs.
• Leadership and communication. Demonstrated ability to work independently, lead design decisions across organizational boundaries, mentor engineers, and resolve technical disagreements constructively. Ability to document architectures and communicate options, risks, recommendations, and results to technical and nontechnical stakeholders.

Preferred qualifications

• Experience with CMS Hybrid Cloud, CMS Enterprise Shared Services, CMS Acceptable Risk Safeguards (ARS), and application onboarding or modernization within CMS.
• Production OCI experience or broader hands-on depth across additional cloud providers.
• Relevant advanced cloud architecture, DevOps, or security certification, supported by demonstrated production delivery.

What success looks like

Accepted architectures adopted in production; progress against agreed reliability and recovery objectives; reduced delivery risk and operational toil; measurable cost and performance improvements; and effective adoption by ADOs. Targets will be established with program and application owners.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.