Role Description As the Principal Solution Architect for Bluestaq's OSINT mission capability, you design the AWS systems that turn open-source data into mission intelligence. You work at the intersection of AWS cloud architecture, applied AI, and intelligence tradecraft. You translate analyst requirements into AWS service selection, model design, data pipelines, and deployment patterns that hold up in defense environments. This is an ownership role, not a coordination role. You are the technical authority for how these systems are built on AWS and where they run, and you are building that capability from the ground up. When the architecture holds under load and across classification levels, you are the reason. When it drifts, you are the first to flag it and the first to arrive with a plan. What You Will Own - Set the AWS reference architecture for AI and ML systems that ingest, enrich, and exploit open-source and publicly available information at scale. - Architect around the service gaps and parity differences between commercial AWS and the government and classified regions. - Build the AI stack on Amazon Bedrock and Amazon SageMaker, including model access, Bedrock Guardrails, Knowledge Bases, and managed endpoints. - Design retrieval pipelines using Amazon OpenSearch, S3 data lakes for governed, least-privilege access. - Orchestrate workflows with AWS Step Functions and AWS Lambda, and define CI/CD with infrastructure as code using AWS CDK and Terraform. - Extend services and capabilities to the edge for disconnected and DDIL operations and local model serving. - Define the deployment pattern for fully air-gapped enclaves, including mirrored registries, signed model imports, and local vector stores. - Define data movement patterns and cross-domain solutions across classification levels and coalition partners. - Apply OSINT tradecraft and operational security discipline to collection system design. - Own model governance for air-gapped and classified environments, including provenance, integrity verification, and update processes. - Partner with security and accreditation authorities to drive ATO and continuous ATO. - Partner with engineering directors and program leadership to align this architecture with Bluestaq's broader AI platform strategy, so it becomes a pattern other programs can build on. - Establish the practices and documentation that let Bluestaq scale this capability and bring engineers on as the mission grows. Qualifications - 10+ years designing and deploying production systems, including 5+ years architecting on AWS. - Deep AWS experience across compute, networking, IAM, storage, and data services, including AWS GovCloud. - Hands-on experience with Amazon Bedrock and Amazon SageMaker for production AI and ML workloads. - Experience with AWS networking and security, including VPC design, PrivateLink, Transit Gateway, IAM Identity Center, and AWS KMS. - Experience with infrastructure as code on AWS using AWS CDK, CloudFormation, or Terraform, plus CI/CD in restricted environments. - Experience deploying AWS workloads in disconnected, degraded, or air-gapped (DDIL) conditions, including AWS Snowball Edge or AWS Outposts. - Working knowledge of the differences between commercial AWS and the GovCloud, Secret, and Top Secret Regions. - Familiarity with vector search, retrieval-augmented generation, and embedding pipelines on AWS. - Working knowledge of OSINT and publicly available information collection, tradecraft, and analytic workflows. - Working knowledge of DoD compliance frameworks, including the Cloud Computing SRG, FedRAMP, and ITAR. - Current AWS Professional certification, such as Solutions Architect Professional. - Clear technical writing and the ability to brief senior leaders and decision-makers. - Prior OSINT analyst or PAI targeting experience in a DoD or Intelligence Community context. - Completion of a foundational intelligence analyst course, such as the DoD Intelligence Analyst Course, the Army 35F course, or ODNI Analysis 101, or a CDASA certification. Preferred Qualifications - AWS Machine Learning Specialty or Advanced Networking Specialty certification. - Experience with cross-domain solutions and multi-level security. - Strong grounding in containerization and orchestration with Kubernetes and Docker on AWS, such as EKS. - Experience with self-hosted model serving on local GPUs, such as vLLM or TGI, inside an enclave. - Familiarity with the NIST AI Risk Management Framework and MITRE ATT&CK. - Experience supporting OCONUS or deployed DoD programs. Required Education - Bachelor’s degree in Computer Science, Engineering, Data Science, or a related field, plus 10+ years of relevant experience. Equivalent experience may substitute for the degree, with 4 additional years beyond the minimum required in lieu of a Bachelor’s degree. Required Location & Travel - This position is remote, open to candidates based in Colorado or Virginia, with up to 12 trips per year to customer, partner, or government sites, including secure facilities. Salary Range (CO) - $200,000 — $300,000 USD Clearance Requirement - This position may require the ability to obtain a TS/SCI Clearance. To be eligible for a security clearance, U.S. citizenship is required, and an employee must agree to participate in a background screen and credit check. Eligibility for a TS/SCI Clearance will be assessed as part of the onboarding process or based on programmatic needs.

• Own reference architecture, cross-team technical standards, architecture governance and decision-making, interoperability patterns, and major technical trade-off analysis. • Lead applicable technical coverage across cloud and DevSecOps engineering, data engineering, data governance and metadata specialization, BI and analytics development, AI/ML platform engineering, security engineering and compliance, API services, partner integrations, and domain architecture. • Guide architecture for platform-first delivery, approved technology direction, infrastructure as code, governed data trust patterns, API-first reuse, secure data sharing, AI-enabled service patterns, public-facing dashboards, and transition-ready artifact management. • Coordinate with customer stakeholders, cloud and platform partners, security and privacy stakeholders, data owners, product teams, and downstream consumers on architecture reviews, environment changes, source onboarding, integrations, public-facing releases, and major technical decisions. • Develop and maintain architectural artifacts in customer-accessible systems, including reference architectures, decision records, diagrams, standards, runbooks, interface documentation, joint operating agreements, service guides, data-flow documentation, and transition materials. • Evaluate new or materially changed services against security, privacy, accessibility, cost transparency, observability, operational readiness, metadata maturity, AI governance, portability, and reuse criteria. • Support joint operating agreements and cross-platform coordination for source-system and downstream-system interfaces, ingestion lead times, schema and metadata changes, incident boundaries, release dependencies, security and privacy responsibilities, support handoffs, and transition responsibilities. • Promote out-of-the-box, native, reusable, open-source-aware, and portable solutions while minimizing unnecessary proprietary dependencies and avoiding contractor-managed external data systems.

Role Description Do you have a passion for children and education? Would you like to positively impact families in need of help? We want to speak with you! The Enterprise Architect is a strategic, hands-on technology leader responsible for driving enterprise-wide architectural excellence and accelerating modernization across the organization. Serving as a cross-domain authority, this role complements and enhances the work of specialist architects in Cloud Infrastructure, Data, Solutions, and Business Architecture, ensuring alignment across technology domains and the delivery of cohesive, scalable enterprise solutions. A primary focus of the role is enterprise modernization, driving the adoption of cloud-native, composable, and platform-oriented architectures that enhance scalability, resilience, extensibility, and operational efficiency. The Enterprise Architect plays a key role in architectural governance, technology strategy, and solution assurance, ensuring that investments align with business objectives and industry best practices. - Supporting the Infrastructure Architect, design and evolve Azure infrastructure across our footprint (Azure Functions, API Management, Service Bus, SQL Managed Instance, Cosmos DB, Microsoft Fabric, Databricks, Entra ID, Power BI, and emerging AKS), emphasizing scalability, resilience, cost, IaC, and security. - Champion cloud-native, composable design — event-driven and API-first patterns, containerization/orchestration, and infrastructure-as-code — and produce reference architectures for integration, messaging, identity, observability, and environment topology. - Support data governance, lineage, and master data management practices as the data lakehouse foundation mature. - Partner with the Data Architect and data delivery team to stand up the foundational data lakehouse on Microsoft Fabric/Databricks/Snowflake, contributing patterns for ingestion, storage, modeling, and BI/analytics enablement (Power BI). - Apply modern integration patterns (APIs, event-driven services, microservices) where they advance the composable target state and support the Solution Architect with cross-domain designs, POCs, Data Contracts, and AI-assisted documentation. - Curate and clarify business and technical requirements, model business/system processes (e.g., BPMN), contribute to capability mapping, and facilitate Joint Application Design (JAD) sessions when needed. - Contribute, as a peer, to cross-domain architecture governance — shared standards, patterns, and guardrails — and act as a subject-matter expert helping delivery teams (employees and contractors) correctly apply established designs. - Evaluate and enable AI capabilities, including agentic AI and AI-assisted development, favoring enterprise-governed, self-hosted platforms. - Provide hands-on design and prototyping (POCs, infrastructure-as-code, reference implementations), perform SWOT/trade-off analyses, and partner with vendors to evaluate and integrate capabilities; sustained production feature development is not the primary expectation. - Design solutions that protect sensitive family, student, and financial data and meet security and compliance requirements, and articulate complex concepts clearly to technical and business audiences. Qualifications - Demonstrated success and a proven track record in professional/life experience in specific job functions, projects, or industries. Military service can substitute for professional experience and/or formal education requirements. - 12+ years in technology roles with depth in at least two architecture domains (cloud infrastructure, data, solution/integration, or business/process) and a record of delivering scalable, production-grade solutions; 5+ years in a lead or senior architectural role influencing design across teams through expertise rather than authority. - Hands-on Azure architecture experience across services such as Azure Functions, API Management, Service Bus, SQL Managed Instance, Cosmos DB, Microsoft Fabric, Databricks, Entra ID, and Power BI (AKS a plus). - Working knowledge of data architecture (modeling, pipelines, lakehouse/warehouse) and cloud-native, composable patterns (API-first, event-driven, microservices, infrastructure-as-code). - Experience curating requirements and modeling business/system processes (e.g., BPMN) and facilitating cross-functional design sessions. Requirements - Bachelor’s degree in computer science, information systems, or a related technical field, or 10 years of equivalent experience; military service may substitute for experience and/or education. - TOGAF, ITIL, or equivalent architecture certifications, plus Azure certifications such as AZ-305 and a data certification (e.g., DP-600 or DP-203). - Proficiency in AI enablement, agentic AI, or AI-assisted coding — preferably on an enterprise governed, self-hosted platform such as Azure AI Foundry. - Breadth across multiple architecture disciplines and experience modernizing legacy solutions toward composable, cloud-native architectures. Benefits - Enjoy medical, dental, and vision coverage, plus HSA, FSA, and Lifestyle Spending Accounts. - Competitive 401(k) with company match to help you plan for the future. - Remote work options and unique time-off programs—including 14 paid holidays, Care and Parental Leave, and our Flexible Leave policy. - From mentorship programs to management training and professional development opportunities, we invest in your career journey every step of the way. - Our dedicated coaching team is here to help you succeed, and employee-led committees give you a voice in shaping our workplace. Interview Process - Veriff Identity Verification - Recruiter Video Interview - Video Interview with Chief Information Officer - Video Interview with Director, IT Operations & Infrastructure

Role Description The Senior Solutions Architect – Channel is a pre-sales technical role responsible for supporting the sale of eSentire’s products and services within an assigned sales territory. The main function of this role is to combine technical knowledge and sales skills in order to describe how eSentire’s services can solve customer cybersecurity problems for our customers and partners. The Senior Solutions Architect will work closely with their assigned Channel Managers to achieve quarterly net-new sales booking targets. Primary Responsibilities - Partner with assigned Channel Manager(s) to achieve quarterly net-new sales booking targets. - Provide consultation to clients and prospects to understand their cybersecurity needs. - Understand eSentire’s service offerings to communicate their value proposition and integration points within a customer’s cybersecurity architecture. - Deliver presentations, whiteboards, demos, workshops, and other engagements tailored to the specific needs of the prospect. - Design, scope and propose the appropriate solution(s) based on the customer’s needs. - Understand the cybersecurity technology and vendor landscape. - Educate customers on the cybersecurity technology and vendor landscape, including how eSentire’s services differentiate from competitors. - Tailor messaging to the prospective customer’s level of competency and experience. - Travel within the assigned sales territory to support direct sales efforts – up to 50%. - Travel nationally to support conferences, industry events, partner events, company and team gatherings – up to 5%. Secondary Responsibilities - Build and maintain client relationships to identify prospective customers who may benefit from eSentire’s services. - Build and maintain relationships with existing customers to gather information on ways to advance or improve eSentire’s services. - Build and maintain relationships cross-functionally across eSentire teams, such as customer success, product management, marketing, etc. - Identify opportunities to improve brand and marketing recognition within the assigned sales territory. - Remain up to date and be able to explain the latest breaches and threats, and how eSentire’s services can help protect against them. - Provide supplemental insight and feedback into sales forecasting. - Provide technical assistance and general advice/guidance to less senior members of the Solutions Architecture team. - Participate in internal initiatives and projects not directly related to sales. - Obtain industry and vendor certifications as required. - Other duties as assigned. Qualifications - 5+ years of previous technical pre-sales experience as a sales engineer, solutions engineer, solutions architecture, or similar role that carries a sales quota and is customer-facing. - Experience and understanding of one or more of the following cybersecurity technologies: MDR, NDR, EDR, EPP, SIEM, Cloud Security, Network Security, Threat Intelligence, Managed Security Services, Security Operations, Digital Forensics & Incident Response, Penetration Testing, Vulnerability Scanning, Security Policies & Procedures. - Experience and understanding of general IT infrastructure & architecture (networking, LAN/WAN, systems, cloud). - Excellent written and verbal communication skills. - Excellent technical knowledge, consultative skills, and presentation skills. - Excellent analytical and problem-solving skills. Ideal Qualifications - Cybersecurity experience, either at a vendor (MDR/MSSP/similar) or security operations/security architecture at a company. - Bachelor’s or Master’s degree in cybersecurity, computer engineering, computer science, or similar analytic field. - Cybersecurity certifications from (ISC)2, ISACA, GIAC, CSA, CompTIA, Offensive Security, or similar vendor-agnostic certification bodies. - Cybersecurity or technology certifications from Microsoft, AWS, Google, Crowdstrike, Carbon Black, Sumo Logic, or similar vendors. Work Location This is a remote position. Compensation Range The expected base salary range for this role is $155,000 to $160,000 USD. This range is for the primary location for which the job is posted. Actual compensation may vary depending on location and job-related factors such as qualifications, experience, knowledge, skills, and internal equity. Total Rewards - Competitive benefit program. - Paid parental leave. - Matching 401K program. - Competitive employee referral bonus. Accommodation If you have any accessibility requirements during the recruitment process, please reach out to our HR team at talentacquisition@esentire.com and any accommodation needs will be addressed upon request.