Senior Cloud Engineer (Active DoD Top Secret security clearance with eligibility for SCI indoctrination)

Ecs Services - Fairfax, VA

Full-time - Mid Level

Fairfax, VA

1,001-5,000 employees

Insurance Carriers and Related Activities

About the position

ECS is seeking a Senior Cloud Engineer to work in a hybrid onsite/remote capacity at ECS Corporate offices located in Fairfax, VA. The Senior Cloud Engineer will work as part of a team responsible for designing, developing, installing, documenting, managing, and maintaining a DoD Mission Partner network enclave's physical and virtual infrastructure. This position is primarily responsible for the administration and coordination of Cloud activities that are inherent with a dynamic and innovative initiative. The role requires working in a demanding, high-energy environment that necessitates innovative solutions to network, hardware, software, and operational challenges. The Senior Cloud Engineer will report directly to the Project Manager and will be involved in various aspects of cloud engineering and infrastructure management. The responsibilities include working within the project team to design, build, implement, and maintain multi-component, cloud-based and hybrid solutions that meet customer and security requirements. The engineer will identify enterprise and customer-specific issues and develop and implement innovative solutions. They will architect, design, implement, and maintain Cloud solutions and new capabilities in AWS and/or Azure, leveraging a variety of automation, instance, and/or container orchestration, security, and native/non-native Cloud services for large DoD programs. Additionally, the engineer will assist in partner network integration, testing, and monitoring, ensuring that system components maintain compliance with DoD requirements. The role also involves conducting functional, interoperability, and security testing, analyzing system performance for potential security problems, and participating in technical incident response and security assessment activities. Knowledge transfer to team members and clients is also a key aspect of this position, along with coordinating and/or providing support for all enclave applications and operations.

Responsibilities

• Work within the project team to design, build, implement, and maintain multi-component, cloud-based and hybrid solutions which meet customer and security requirements.
• Identify enterprise and customer-specific issues and develop and implement innovative solutions.
• Architect, design, implement, and maintain Cloud solutions and new capabilities in AWS and/or Azure.
• Leverage a variety of automation, instance, and/or container orchestration, security, and native/non-native Cloud services for large DoD program(s).
• Assist in partner network integration, testing, and monitoring.
• Install, configure, maintain, update, manage, and refine information systems.
• Ensure system components maintain compliance with DoD requirements.
• Conduct functional, interoperability, and security testing.
• Analyze system performance for potential security problems.
• Participate in technical incident response and security assessment activities.
• Provide knowledge transfer to team members and clients as needed.
• Coordinate and/or provide support for all enclave applications and operations.

Requirements

• U.S. citizenship required per contract.
• Active DoD Top Secret security clearance with eligibility for SCI indoctrination.
• Ability to work in a hybrid, on-site/remote capacity in Fairfax, VA (~3 days in office).
• Bachelor's degree in Computer Science, Information Technology, Computer Networking, Computer Security, or other Science, Technology, Engineering and Mathematics (STEM) discipline.
• 6+ years of experience designing, engineering, and deploying infrastructure systems and services within cloud environments.
• 6+ years of experience and proficiency working with Amazon Web Services' cloud services and technologies including, but not limited to: EC2, Storage concepts (S3, RDS, EBS), EKS, VPC, and Security Groups / IAM.
• 6+ years of experience and proficiency working with Azure and technologies including, but not limited to: Virtual Machines, Storage accounts, PostgreSQL, Kubernetes, Azure Networking, and IAM.
• DoD 8570 Compliant, minimum IAT Level II (e.g., CompTIA Security+ or higher); current, or achieved within 60 calendar days of employment.
• Ability to travel locally to Falls Church, VA, as needed, for weekly customer site support.
• Ability to travel both CONUS and OCONUS throughout the duration of the effort (< 10%).
• Proficiency in developing, engineering, and deploying Docker and Kubernetes-based containerized solutions.
• Proficiency in supporting Windows and Linux operating systems.
• Proficiency in supporting Microsoft Active Directory/ AD FS.
• Proficiency with Cloud networking and troubleshooting (e.g., IP networking, VPNs, DNS, and load balancing).
• Solid understanding of Firewalls, NAT, SSL/TLS, etc.
• Experience in one or more automation languages (e.g. Ansible, Terraform, Cloud Formation, BASH, PowerShell).
• Experience with applying STIGs for Windows and Linux endpoints, using the STIG Viewer for reporting.
• Demonstrated ability to communicate clearly and effectively, both orally and in writing.
• Politically savvy to confront difficult problems in a positive and creative way.
• Demonstrated ability to expertly balance multiple, competing priorities and execute accordingly.

Nice-to-haves

• Active TS/SCI security clearance.
• Master's degree in Computer Science, Information Technology, Computer Networking, Computer Security, or related STEM discipline.
• Hands-on AWS experience (preferred).
• Experience with DevSecOps frameworks.
• Experience using big data tools, cloud or on-prem.
• Infrastructure as Code experience (Ansible, Chef, Terraform, Puppet).
• Experience working with DoD networks, or similar organizations and/or customers / performers.
• AWS certification(s): AWS Certified Solution Architect - Associate/Professional preferred.
• Azure certification(s): AZ-103/104 and/or AZ-304/305 highly desired.
• Certified Information Systems Security Professional (CISSP).
• Hands-on experience working with Atlassian's Jira and Confluence.

Benefits

• Highly competitive compensation and benefits package.
• Opportunities for telework.
• Growth opportunities in a supportive team environment.