Classified Technical and Cloud Computing Engineer

The Aerospace Corporation is the trusted partner to the nation’s space programs, solving the hardest problems and providing unmatched technical expertise. As the operator of a federally funded research and development center (FFRDC), we are broadly engaged across all aspects of space— delivering innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you’ll be part of a special collection of problem solvers, thought leaders, and innovators.

Join us and take your place in space.

Enterprise Information Services is responsible for Aerospace’s classified and unclassified enterprise IT environment. As a Classified Technical and Cloud Computing Engineer, you’ll design, deploy, secure, and maintain Azure-based virtual enclaves in a classified environment. This role requires deep expertise in Azure services, governance, security controls, and enclave operations within DoD or IC-compliant architectures. The ideal candidate is experienced with operating in high‑security environments and ensuring compliant, resilient cloud solutions.

You will join a company that develops cutting edge solutions for our nation’s most complex space enterprise and mission assurance challenges.

The selected candidate will be required to work full-time, on-site at our facility in Colorado Springs, CO or El Segundo, CA

• Deploy, configure, and maintain Azure virtual enclaves to support mission applications and workloads in a classified environment.
• Implement and enforce security, compliance, and governance policies aligned with DoD, IC, NIST, and organizational standards.
• Manage virtual networks, subnets, firewalls, NSGs, routing, private endpoints, and cross‑domain or cross‑environment integrations.
• Automate infrastructure provisioning and configuration using tools such as Terraform, Ansible, or Azure Automation.
• Monitor cloud infrastructure for performance, security posture, availability, and compliance; perform root-cause analysis and remediation.
• Implement identity and access controls using Entra , RBAC/ABAC, and Conditional Access policies.
• Support enclave patching, logging, vulnerability mitigation, and configuration baselines.
• Partner with cybersecurity teams to conduct risk assessments, STIG compliance, audit activities, and ATO sustainment.
• Maintain documentation covering architecture, deployment patterns, security controls, and operational procedures.
• Provide technical support for enclave operations and cloud-related incidents.

Minimum Requirements for Level V:

• Current TS/SCI clearance with SSBI and CI polygraph
• Current DoD 8570 compliant certification (Security+)
• Bachelor’s Degree in Computer Science, STEM, or IT
• 5–8 years of Azure cloud engineering, administration, or architecture experience.
• Hands‑on experience deploying and maintaining virtual enclaves or isolated cloud environments.
• Strong understanding of Azure networking, compute, storage, identity, security, and monitoring services.
• Experience with infrastructure-as-code and automated deployment workflows.
• Familiarity with NIST 800-53, RMF, STIGs, Zero Trust principles, and other federal compliance frameworks.
• Ability to work in highly constrained, classified, or air‑gapped environments.
• Strong troubleshooting skills and ability to solve complex technical problems independently.

Travel required:

10% or less domestic.

• It would be impressive if you have one or more of these:
  Azure certifications (AZ-104, AZ-305, SC-100, or similar).
• Experience with cross-domain solutions.
• Familiarity with Kubernetes (AKS), container security, or enclave modernization patterns.
• Experience implementing attribute based access control (ABAC)…