Security Architecture & Design Define cloud security architecture and controls aligned with organizational, regulatory, and industry standards. Design secure landing zones, identity models, network security boundaries, and data protection strategies for Azure and AWS. Provide guidance on secure patterns for application, infrastructure, and platform design. Identity & Access Management (IAM) Develop and enforce IAM principles such as Zero Trust, least privilege, conditional access, and role-based access controls. Oversee security posture of Azure AD/Entra ID, AWS IAM, and federated identity integrations. Implement privileged access management and credential governance. Cloud Security Governance & Compliance Establish cloud security policies, standards, baselines, and guardrails. Ensure compliance with frameworks (ISO, SOC2, CIS benchmarks, NIST, regulatory requirements). Define and monitor governance controls such as policies, tagging standards, cost controls, and resource compliance. Threat Protection & Monitoring Implement and optimize cloud-native security tools (Azure Defender, AWS Security Hub, GuardDuty, SIEM/SOAR). Monitor for vulnerabilities, misconfigurations, and emerging threats across cloud environments. Support threat modeling, incident response, and forensics readiness. Data Protection & Encryption Define strategies for data classification, encryption (at rest/in transit), key management (Azure Key Vault, AWS KMS). Ensure secure handling of sensitive and regulated data across applications and services. Provide guidance on backup security, retention, and recovery. Risk Management & Security Assurance Identify cloud security risks and develop mitigation strategies. Conduct technical risk assessments, penetration test coordination, and remediation planning. Support architectural reviews and change management from a security perspective. At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus. Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself. We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.

Role Description ECS is seeking an experienced Technical Lead (Cloud Application Architect (Azure, Agile, DevOps) to work remotely to provide technical direction and engineering support for projects and infrastructure, including: - Data architecture, modeling, design - Data management - Data security - System integration Enabling high-quality UI/UX design solutions for web and mobile applications and products. Please Note: This position is contingent upon contract award. Solution Architect: - Providing technical leadership in identifying, designing, and implementing web and mobile application standards as well as investigation of technical alternatives. - Design, maintain and implement Azure resources, including virtual networks, storage solutions, compute instances, databases, and application services. - Assist business domain stakeholders with migration "lift and shift" cost-benefit analyses of on-premises vs. cloud-based solutions. - Create a secure and scalable mobile system architecture that integrates with existing systems and designated partner applications. - Ensure applications are FISMA compliant. Recommend and implement security features as necessary, to adhere to Federal, HHS, NIH, and NIAID security requirements. - Evaluate and employ software tools that will allow the development and deployment of mobile software using a ‘write-once, run-anywhere' model. Cloud Migration: - Provide advisory and technical support for cloud-related application and infrastructure modernization efforts. - Architect and troubleshoot high availability and resilient solutions using methods, including clustering and failover. - Collaborate with business stakeholders and development teams to create solutions to take advantage of cloud services and capabilities (e.g. auto-scaling, serverless architectures, micro-services, containerization, etc.). - Conduct proof-of-concept and pilot projects to evaluate cloud migration and modernization approaches. - Assist SEB in conducting market research on cloud platforms and tools. Agile Delivery: - Collaborate with business stakeholders and cross-functional teams to ensure project alignment with business objectives. - Prepare and present HHS Enterprise Performance Life Cycle (EPLC) stage gate deliverables and presentations to review boards. - Conduct and/or participate in formal and informal reviews throughout the EPLC life cycle. - Enable Continuous Integration/ Continuous Delivery (CI/CD) pipelines for web and mobile applications. - Ensure compliance with quality assurance standards, guidelines, and procedures. Qualifications - Minimum 10+ years of hands-on software development experience designing and developing enterprise applications using Microsoft Tech Stack. - 5+ years of experience leading technical teams in Agile environments. - 3+ years of hands-on experience building large scalable web and mobile based applications using React. - Experience with utilizing .NET Platform (.NET 8) with JavaScript, React, and Vue for the front end and Microsoft SQL Server databases for data storage. - Experience installing, configuring, and integrating custom solutions, COTS, GOTS, and FOSS into a larger collection of services and systems. - PMP (Project Management Professional) Certification. - Travel within the Washington DC Metro Area, and CONUS as needed. Requirements - Salary Range: $120,000 - $165,000 Benefits - General Description of Benefits

• Collaborate with stakeholders to understand business needs, goals, and objectives • Define the organization's cloud strategy and roadmap • Architect and design cloud-based solutions that align with business and technical requirements • Plan, implement, and manage cloud infrastructure • Develop and implement cloud security strategies, policies, and procedures • Assess existing IT systems and develop strategies for migrating to the cloud • Collaborate with cross-functional teams and provide technical guidance on cloud architecture • Establish a cloud governance framework, policies, and procedures

Role Description This Cloud Engineer will lead architecture and end-to-end delivery of containerized infrastructure and pipelines across AWS (primary) and AKS (secondary), with hands-on ownership of Kubernetes operations and platform engineering. They will drive maturity in IaC-first, no-clickops culture. - Build/operate EKS (or AKS): cluster provisioning, node groups, upgrades, add-ons (CNI, CSI), autoscaling, RBAC, network policies. - Ship software via CI/CD (Azure DevOps, Jenkins): pipelines, artifacts, environments, Helm/Kustomize releases, ArgoCD deployments. - Define infrastructure as code (Terraform, CloudFormation; Ansible for config) and keep plans clean/drift-free. - Observability: CloudWatch, Datadog, Prometheus/Grafana; SLOs, alerts, runbooks, incident response. - Security & compliance: secrets management, IAM roles for service accounts, image scanning, policies, change controls. - Partner with app teams; troubleshoot across app, container, network, and infra layers. Qualifications - 7+ years in cloud/DevOps/SRE; 4+ years running production Kubernetes. - Strong in AWS (VPC, IAM, ECR, ALB/NLB, Route 53, S3, KMS). - Proven CI/CD delivery with Azure DevOps and/or Jenkins. - Hands-on with Terraform; comfortable with CloudFormation and Ansible. Requirements - Nice to have: GitOps (Argo CD/Flux), Service Mesh (Istio/App Mesh), Canary/Blue-Green. - CKA/CKAD. Benefits - Competitive compensation. - Benefits package designed to support your life inside and outside of work. - Tuition reimbursement. - Parental leave. - Paid volunteer hours. - Unlimited PTO. - Flexible work environment.