Cloud Engineer

This is a fully remote position, open to applicants in Oregon.

📋 Description

• Design, implement, and sustain secure cloud environments in AWS and Azure, ensuring adherence to DoD cloud security frameworks and optimal practices.

• Set up identity and access management (IAM) solutions, enforce role-based access controls (RBAC), and oversee cloud security groups and firewalls.

• Enhance cloud networking configurations, including VPC peering, VPNs, and cross-domain connectivity to guarantee secure and effective cloud operations.

• Assist in the creation of Infrastructure-as-Code (IaC) solutions utilizing Terraform, CloudFormation, or ARM templates to automate secure cloud deployments.

• Participate in the Cloud Security & Performance Optimization Report, providing insights on cloud security configurations, resource utilization efficiencies, and compliance measures.

• Monitor and report on Kubernetes and other workload-specific cloud resource usage by Work Order, utilizing GovCloud-native observability tools (e.g., Azure Monitor, AWS CloudWatch, Cost Explorer).

• Collaborate with other Work Order contractors (e.g., WO-003) to balance prepay or reservation usage with actual consumption and deliver monthly reports on compute and storage allocation, tagging compliance, and anticipated costs.

• Provide guidance to the Government on workload placement and optimization strategies across IL2, IL4, and IL5 environments to minimize costs while upholding performance and security compliance.

• Provision and manage IL2, IL4, and IL5 GovCloud infrastructure using native Azure and/or AWS tools whenever possible.

• Implement cloud-native services for monitoring (e.g., CloudWatch, Azure Monitor), cost management, and compliance automation to support scalability, security, and chargeback alignment.

• Provision infrastructure in collaboration with other Work Orders.

• Provision and oversee shared container environments and storage for dependent Work Orders, ensuring secure and efficient resource allocation and interoperability across Work Orders.

⛳️ Requirements

• Proficient in designing, deploying, and maintaining GovCloud-based infrastructures across AWS and Azure, guaranteeing high availability, scalability, and security for mission-critical applications.

• Required knowledge encompasses cloud architecture, networking, virtualization, containerization, and security best practices, with expertise in Infrastructure-as-Code (IaC) solutions such as Terraform or AWS CloudFormation.

• Candidates must have experience with hybrid and multi-cloud configurations, including Virtual Private Cloud (VPC) peering, identity management (IAM), and cross-domain solutions.

• Strong understanding of the Authority to Operate (ATO) process is essential, including the preparation of security documentation, conducting compliance assessments, and maintaining continuous monitoring in accordance with DoD Risk Management Framework (RMF), NIST 800-53 Rev. 5, FedRAMP, and DoD IL-4/IL-5 security mandates.

• Candidates must also optimize cloud resources for compute, storage, and networking efficiency while ensuring full compliance with DoD governance policies.

• A Bachelor’s degree in Computer Science, Information Systems, or a related field is required, or; five (5) years of equivalent experience in cloud engineering.

• Candidates must have experience in designing, deploying, and managing AWS and Azure cloud environments with an emphasis on security, automation, and scalability.

• Required expertise includes Identity and Access Management (IAM), role-based access control (RBAC), Zero Trust Architecture (ZTA), and cloud networking configurations such as VPC peering, subnets, VPNs, and security groups.

• Candidates must demonstrate proficiency in Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or ARM templates, ensuring secure and scalable deployments.

• Experience with Authority to Operate (ATO) processes is required, including the preparation of System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action & Milestones (POA&M), and maintaining compliance with DoD governance frameworks and NIST requirements.

• Candidates must also work in tandem with cybersecurity teams to implement security controls in line with FedRAMP, RMF, and DoD IL-4/IL-5 security mandates, while optimizing cloud resource allocation for efficiency.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Generous paid time off and holiday leave.

• Opportunities for professional development and training.

• Flexible work environment and remote work options.