Senior Cloud Engineer - AWS

Job summary

Design, build, and operate a secure AWS cloud foundation for a federal customer, including multi-account landing zones, hub-and-spoke networking, and federated identity. Maintain production environments using Terraform or CloudFormation, GitOps, NIST SP 800-53 Rev. 5 security controls, monitoring, incident response, and disaster recovery; also provide ATO evidence, operational documentation, and knowledge transfer.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on AWS experience.
• Production experience with Terraform and/or CloudFormation.
• Hands-on experience with AWS multi-account landing zones, VPC design, Transit Gateway, and Direct Connect or site-to-site VPN.
• Experience implementing IAM and single sign-on federation using SAML 2.0 or OIDC.
• Experience monitoring, patching, and troubleshooting Linux and Windows cloud workloads.
• Working knowledge of NIST SP 800-53 controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.
• Preferred: experience with FedRAMP Moderate or High, AWS GovCloud, and ATO packages.
• Preferred: working knowledge of Azure, Google Cloud, or Oracle Cloud Infrastructure.
• Preferred: experience with policy as code, Ansible, and CI/CD tools.
• Preferred: experience integrating cloud tools with ServiceNow ITSM and CMDB.
• Preferred: prior support of a civilian federal agency.

Responsibilities

• Design and deploy AWS landing zones, multi-account structures, and hub-and-spoke networks integrated with customer WAN and DNS.
• Build and maintain Terraform or CloudFormation infrastructure and GitOps workflows for production, integration, development, and sandbox environments.
• Implement IAM and federated access using SAML 2.0 or OIDC in alignment with Zero Trust principles.
• Configure security and compliance guardrails using Service Control Policies, AWS Config, Security Hub, and GuardDuty against NIST SP 800-53 Rev. 5 and customer standards.
• Apply enterprise tagging for asset management, cost tracking, and chargeback or showback.
• Monitor cloud environments and integrate events, incidents, and changes with ServiceNow.
• Perform patching, maintenance, capacity planning, rightsizing, and incident response.
• Design and test high availability, backup, and disaster recovery for cloud workloads.
• Write runbooks and SOPs, provide ATO evidence, and transfer knowledge to customer operations staff.

Skills

Certifications

Degrees

Work schedule

Industry

Security clearance

Relocation