Principal Solution Architect, AI & OSINT Systems at Bluestaq US External
United States
$200k - $300k
<p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Why This Role Matters</span></span></strong><span data-ccp-props="{"335559738":240,"335559739":120}"> <br></span><span data-contrast="none">Open-source intelligence is now a primary feed for mission decisions, not a supplement. The volume of publicly available information has outrun the ability of analysts to exploit it by hand. Mission teams need AI systems that ingest, enrich, and reason over that data, and they need those systems to run where the mission runs.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="none">That includes the hard places. Disconnected enclaves. Degraded networks. Air-gapped regions with no route to the public internet. The architecture that works in commercial AWS does not survive contact with a denied environment. Someone has to design the version that does.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="none">Bluestaq builds on AWS across every classification level, from GovCloud to the Secret and Top Secret Regions. This role sets how we use that platform for AI-enabled OSINT. You decide how models, data, and pipelines run on AWS, connected or not. You own the structural decisions this capability is built on, from day one.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">The Role</span></span></strong><span data-ccp-props="{"335559738":240,"335559739":120}"> <br></span><span data-contrast="none">As the Principal Solution Architect for Bluestaq's OSINT mission capability, you design the AWS systems that turn open-source data into mission intelligence. You work at the intersection of AWS cloud architecture, applied AI, and intelligence tradecraft. You translate analyst requirements into AWS service selection, model design, data pipelines, and deployment patterns that hold up in defense environments.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="none">This is an ownership role, not a coordination role. You are the technical authority for how these systems are built on AWS and where they run, and you are building that capability from the ground up. When the architecture holds under load and across classification levels, you are the reason. When it drifts, you are the first to flag it and the first to arrive with a plan.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335559738":240,"335559739":240}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">What You Will Own</span></span></strong><span data-ccp-props="{"335559738":240,"335559739":120}"> </span></p> <ul> <li><span data-contrast="none">Set the AWS reference architecture for AI and ML systems that ingest, enrich, and exploit open-source and publicly available information at scale.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Architect around the service gaps and parity differences between commercial AWS and the government and classified regions.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Build the AI stack on Amazon Bedrock and Amazon SageMaker, including model access, Bedrock Guardrails, Knowledge Bases, and managed endpoints.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Design retrieval pipelines using Amazon OpenSearch, S3 data lakes for governed, least-privilege access.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Orchestrate workflows with AWS Step Functions and AWS Lambda, and define CI/CD with infrastructure as code using AWS CDK and Terraform.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Extend services and capabilities to the edge for disconnected and DDIL operations and local model serving.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Define the deployment pattern for fully air-gapped enclaves, including mirrored registries, signed model imports, and local vector stores.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Define data movement patterns and cross-domain solutions across classification levels and coalition partners.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Apply OSINT tradecraft and operational security discipline to collection system design.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Own model governance for air-gapped and classified environments, including provenance, integrity verification, and update processes.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Partner with security and accreditation authorities to drive ATO and continuous ATO.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Partner with engineering directors and program leadership to align this architecture with Bluestaq's broader AI platform strategy, so it becomes a pattern other programs can build on.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Establish the practices and documentation that let Bluestaq scale this capability and bring engineers on as the mission grows.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Required Qualifications</span></span></strong></p> <ul> <li><span data-contrast="none"><span data-ccp-parastyle="heading 2">10+ years designing and deploying production systems, including 5+ years architecting on AWS.</span></span><span data-ccp-props="{"335559738":240,"335559739":120}"> </span></li> <li><span data-contrast="none">Deep AWS experience across compute, networking, IAM, storage, and data services, including AWS GovCloud.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Hands-on experience with Amazon Bedrock and Amazon SageMaker for production AI and ML workloads.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience with AWS networking and security, including VPC design, PrivateLink, Transit Gateway, IAM Identity Center, and AWS KMS.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience with infrastructure as code on AWS using AWS CDK, CloudFormation, or Terraform, plus CI/CD in restricted environments.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience deploying AWS workloads in disconnected, degraded, or air-gapped (DDIL) conditions, including AWS Snowball Edge or AWS Outposts.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Working knowledge of the differences between commercial AWS and the GovCloud, Secret, and Top Secret Regions.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Familiarity with vector search, retrieval-augmented generation, and embedding pipelines on AWS.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Working knowledge of OSINT and publicly available information collection, tradecraft, and analytic workflows.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Working knowledge of DoD compliance frameworks, including the Cloud Computing SRG, FedRAMP, and ITAR.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Current AWS Professional certification, such as Solutions Architect Professional.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Clear technical writing and the ability to brief senior leaders and decision-makers.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Prior OSINT analyst or PAI targeting experience in a DoD or Intelligence Community context.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Completion of a foundational intelligence analyst course, such as the DoD Intelligence Analyst Course, the Army 35F course, or ODNI Analysis 101, or a CDASA certification.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Preferred Qualifications</span></span></strong><span data-ccp-props="{"335559738":240,"335559739":120}"> </span></p> <ul> <li><span data-contrast="none">AWS Machine Learning Specialty or Advanced Networking Specialty certification.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience with cross-domain solutions and multi-level security.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Strong grounding in containerization and orchestration with Kubernetes and Docker on AWS, such as EKS.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience with self-hosted model serving on local GPUs, such as vLLM or TGI, inside an enclave.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Familiarity with the NIST AI Risk Management Framework and MITRE ATT&CK.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="none">Experience supporting OCONUS or deployed DoD programs.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">Required Education</span></span></strong><span data-ccp-props="{"335559738":240,"335559739":120}"> </span></p> <p><span data-contrast="none">Bachelor’s degree in Computer Science, Engineering, Data Science, or a related field, plus 10+ years of relevant experience. Equivalent experience may substitute for the degree, with 4 additional years beyond the minimum required in lieu of a Bachelor’s degree.</span></p> <p><strong><span data-contrast="none">Required Location & Travel<br></span></strong><span data-contrast="none">This position remote, open to candidates based in Colorado or Virginia, with up to 12 trips per year to customer, partner, or government sites, including secure facilities.</span><strong><span data-contrast="none"><br></span></strong></p><div class="content-pay-transparency"><div class="pay-input"><div class="title">Salary Range (CO)</div><div class="pay-range"><span>$200,000</span><span class="divider">—</span><span>$300,000 USD</span></div></div></div><div class="content-conclusion"><p><strong>Clearance Requirement:</strong> This position may require the ability to obtain a TS/SCI Clearance. To be eligible for a security clearance, U.S. citizenship is required, and an employee must agree to participate in a background screen and credit check. Eligibility for a TS/SCI Clearance will be assessed as part of the onboarding process or based on programmatic needs.</p> <hr> <p><strong>About Bluestaq<br></strong>At Bluestaq, we build secure data platforms that matter for space missions, national defense, healthcare systems, and commercial innovation. Founded in 2018, we've become a leader in enterprise software and secure data management by staying focused on what counts: modern architecture, operational excellence, and mission impact.</p> <p>We're engineers, problem-solvers, and builders who take the mission seriously, but not ourselves. We automate the repeatable, question the status quo, and design systems that are as reliable as they are scalable. Whether we're supporting space, defense systems, or healthcare advancements, we build with the same principles: cloud-native solutions, security by design, and relentless simplicity.</p> <hr> <p><strong>Relocation:</strong> This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.</p> <p><strong>Date the Position Closes:</strong> Applications will be accepted for 60 days beyond the posting date, or until the position is filled, whichever comes first.</p> <p><em>Bluestaq is an Equal Opportunity Employer. We prohibit unlawful discrimination against applicants or employees on the basis age 40 and over, color, disability, gender identity, genetic information, military or veteran status, national origin, race, religion, sex, sexual orientation, or any other status protected by state or local law.</em></p> <p><em>Bluestaq will make reasonable accommodations for qualified individuals with known disabilities and employees whose work requirements interfere with a religious belief unless doing so would result in an undue hardship to Bluestaq or a direct threat. Employees needing such accommodation are instructed to contact Human Resources immediately at <a href="mailto:contact.us@bluestaq.com">contact.us@bluestaq.com</a>.</em></p></div>
Apply Now