• Define, encode, and harden Pearson-aligned cloud and IaC standards as versioned Git artifacts: Cursor rules, agent skills, reference Terraform modules, and scaffolds delivered through AFAs (passive rules at edit time; on-demand skills for design, remediation, and architectural verdict), including Internal Developer Platform and CI/CD guardrails for agent-assisted changes. • Express platform and operations context as diagram-as-code (for example Mermaid or Structurizr) and ADRs in the repository—linked to AFA install and assessment—not unmanaged documents outside Git. • Own Terraform on Azure for AKS and adjacent services (networking, identity, secrets, storage, monitoring): module boundaries, state and pinning, drift control, tagging, environments, and cost attribution. • Align CI/CD with enterprise change control—pipelines, promotion, plan/apply, rollback—and wire in policy-as-code, drift detection, secret scanning, and compliance tags. • Implement least-privilege Azure RBAC, managed identities, Key Vault, and network controls; keep secrets out of source; support rotation and audit-ready evidence in Git. • Shape AKS patterns: node pools and upgrades (including GPU pools, device plugins, and time-slicing or equivalent where used), failure modes and capacity, observability hooks in modules and AFA patterns, and consistent Terraform/Helm touchpoints for SKUs, labels/taints, and add-ons. • Produce handover-ready repository bundles for receiving squads—deploy, upgrade, and rollback views, ownership matrix, operational artifacts—and define readiness criteria with DevOps.

• Lead the Cloud Operations team, setting priorities, processes, and metrics. • Ensure stable and secure operation of the cloud infrastructure. • Define and drive risk mitigation plans (WAR), with a preventive focus. • Establish and evolve FinOps practices: cost management, budgets, and forecasting; identification of waste and optimization opportunities. • Implement and govern Identity and Access Management (IAM) practices: roles, policies, SCPs; least privilege principle; access and credential management. • Lead cloud security and hardening initiatives: AWS Config, Security Hub, GuardDuty (or similar); cloud security posture management (CSPM); vulnerability management. • Define and implement compliance and governance controls: policies, audits and evidence; adherence to standards and best practices. • Define and maintain architecture and security guardrails: mandatory standards (security baseline); automated controls (policy as code). • Govern the lifecycle of images and workloads: use of approved base images; vulnerability scanning; blocks for critical CVEs. • Collaborate with Architecture and Engineering to ensure adoption of defined standards. • Promote automation and continuous improvement (Infrastructure as Code, automated security, continuous controls).

• Design scalable, resilient, and secure cloud architectures • Evaluate architectural trade-offs considering cost, performance, security, reliability, and operational excellence • Create and maintain architecture diagrams (C4, AWS Architecture Icons) and detailed technical documentation • Conduct design reviews and architecture analyses with development teams • Implement and evolve cloud infrastructure with a focus on scalability, resilience, security, and cost optimization • Define reusable infrastructure patterns and frameworks to accelerate team delivery • Automate operational tasks using Infrastructure as Code (IaC) and scripting • Ensure high availability and performance of services by implementing disaster recovery and backup strategies • Plan and monitor service capacity and performance • Implement and maintain observability solutions (logs, metrics, traces) • Collaborate actively with development, product, and architecture teams • Write and implement code following internal quality standards • Perform code reviews and contribute technically to the platform architecture • Identify and implement continuous improvements in processes, architecture, and operations • Participate in the assessment and resolution of critical incidents • Promote and disseminate a culture of cloud architecture excellence • Evaluate new AWS technologies and services

• Architect and design secure cloud solutions within a Department of the Navy virtual private cloud hosted on Microsoft Azure Flank speed • Lead planning and execution of migration from on premises systems to cloud environments while ensuring continuity of mission operations • Develop cloud architectures supporting NIPR SIPR and JWICS domains in coordination with government stakeholders • Design and maintain cloud networking identity access management storage and compute architectures aligned with Zero Trust principles • Integrate cybersecurity controls in accordance with Risk Management Framework NIST Intelligence Community Directive and Department of Defense policies • Support Assessment and Authorization activities including development of system security plans security assessment reports and plans of action and milestones • Coordinate with enterprise architects cybersecurity teams application developers and operations teams to ensure interoperable and secure cloud services • Support cloud cost modeling usage tracking and optimization to meet government financial management requirements • Develop and maintain technical documentation including architecture diagrams system designs and standard operating procedures • Provide guidance on cloud best practices automation scalability disaster recovery and high availability • Support transition activities ensuring required cloud skill sets are available throughout the contract lifecycle