Cloud Engineer (Multi-Cloud).

Location: Ashburn, VA

Clearance: Top Secret (or able to obtain)

Salary Rate: $130,000-$170,000

Our client is seeking a skilled Cloud Engineer to support a DHS-cleared program in
Ashburn, VA. The Cloud Engineer will design, build, and operate secure, highly
available infrastructure across AWS, Microsoft Azure, and Google Cloud Platform
(GCP), with a strong emphasis on DevOps automation, infrastructure as code, and
CI/CD pipeline engineering. This role partners closely with development,
security, and operations teams to deliver scalable cloud solutions that meet
federal government mission and compliance requirements.

•     Design, deploy, and
maintain cloud infrastructure across multi-cloud environments, including AWS,
Azure, and Google Cloud Platform.

•     Build and manage
Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or
ARM/Bicep templates.

•     Design, implement, and
maintain CI/CD pipelines to automate build, test, and deployment processes
(e.g., Jenkins, GitLab CI, AWS CodePipeline, Azure DevOps).

•     Implement
containerization and orchestration solutions using Docker and Kubernetes (EKS,
AKS, or GKE).

•     Configure and manage
cloud networking, identity and access management (IAM), and security groups in
accordance with federal security requirements.

•     Monitor cloud
environments for performance, cost, and security using tools such as
CloudWatch, Azure Monitor, Stackdriver, Splunk, or Datadog.

•     Automate configuration
management and system provisioning using tools such as Ansible, Chef, Puppet,
or Salt.

•     Collaborate with ISSOs
and security engineers to ensure cloud architectures meet DHS/FedRAMP security
control requirements and support Authorization to Operate (ATO) activities.

•     Troubleshoot and resolve
infrastructure, deployment, and pipeline issues across development, test, and
production environments.

•     Support disaster
recovery, backup, and high-availability architecture design across cloud
platforms.

•     Document cloud
architecture, deployment processes, and operational runbooks.

•     Stay current on emerging
cloud technologies and recommend improvements to existing infrastructure and
processes.

•     U.S. Citizenship
required.

•     Active DHS
clearance/suitability, or ability to obtain and maintain one.

•     Bachelor's degree in
Computer Science, Information Technology, Engineering, or a related field, or
equivalent professional experience in lieu of degree.

•     Minimum of 3–5 years of
hands-on cloud engineering experience across one or more of AWS, Azure, or
Google Cloud Platform.

•     Demonstrated DevOps
experience, including CI/CD pipeline development, automation, and
Infrastructure as Code.

•     Experience with
containerization and orchestration technologies (Docker, Kubernetes).

•     Strong
scripting/programming skills (e.g., Python, Bash, PowerShell, Go).

•     Familiarity with federal
cloud security requirements, including FedRAMP and DHS 4300A.

•     Strong problem-solving
skills and the ability to work collaboratively across cross-functional teams.

Candidates
must hold, at minimum, the following cloud certifications at time of
application:

•     AWS Certified
(Associate-level or higher, e.g., AWS Certified Cloud Practitioner, Solutions
Architect – Associate, or SysOps Administrator)

•     AWS Certified DevOps
Engineer – Professional

•     AWS Certified
Solutions Architect (Associate or Professional)

•     Additional
certifications such as Microsoft Certified: Azure DevOps Engineer Expert, Azure
Solutions Architect Expert, or Google Professional Cloud DevOps Engineer /
Cloud Architect.

•     Certified Kubernetes
Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).

•     Prior experience
supporting DHS, CBP, or another federal law enforcement/homeland security
agency.

•     Experience with GovCloud
environments (AWS GovCloud, Azure Government).

•     Experience with GitOps
practices and tools such as ArgoCD or Flux.

•     Security certifications
such as Security+ or CISSP.