Senior Cloud Engineer

Company Overview

Pantheon Data (a Kenific Holding company) is a private, small business based in the Washington, DC, area. Pantheon Data was founded in 2011, initially providing acquisition and supply chain management services to the US Coast Guard. Our service offerings have grown in the past ten years, including infrastructure resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and cybersecurity.

We have also grown our customer base to include commercial clients. The company has used this experience to expand our service offerings to other agencies within the Department of Homeland Security (DHS), the Department of Defense (DoD), and other Federal Civilian Agencies.

Pantheon Data is seeking a Senior Cloud Engineer to lead the operational management and technical support of AWS Gov Cloud (US) environments. This role is critical in hosting secure federal workloads, including Generative AI (Bedrock) and ML (Sage Maker) applications. You will ensure 99.9% availability, maintain compliance with NIST 800-53 Rev 5 and CMMC 2.0 Level 2, and serve as the primary technical escalation point for developers and Dev Sec Ops  engineers.

• Environment Management:
  Provision and manage multi-account AWS Gov Cloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data.
• Cloud Operations & Monitoring:
  Execute day-to-day operations including automated patching (AWS Systems Manager), backup verification (AWS Backup), and continuous monitoring via Amazon Cloud Watch and Cloud Trail.
• Security & Compliance Ops:
  Perform regular security updates, image hardening (AMI/Container), and vulnerability remediation based on Amazon Inspector and Security Hub findings. Ensure all endpoints meet FIPS 140-3 requirements.
• CI/CD & Dev Support:
  Partner with Dev Sec Ops  to integrate Git Hub Advanced Security (GHAS) into deployment workflows and provide deep-dive troubleshooting for developer-facing cloud environment issues (e.g., IAM policy debugging, VPC routing, and EKS connectivity).
• Incident Response:
  Lead root-cause analysis for performance bottlenecks and service interruptions in production and staging environments.

• Cloud Expertise: 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS Gov Cloud.
• AI/ML Infrastructure:
  Familiarity with managing LLM infrastructure and RAG pipelines.
• Infrastructure as Code:
  Terraform skills, including module development and remote state management in a cross-account environment.
• Networking & Security:
  Advanced knowledge of VPC architecture (Transit Gateways, Private Link, VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS.
• Operational Tooling:
  Proficiency with AWS Systems Manager (SSM) for fleet management, AWS Config for compliance tracking, and Grafana/Cloud Watch for observability.
• Compliance Frameworks:
  Understanding of FedRAMP High, NIST SP 800-53, CMMC v2/3 technical controls.
• Ability to work effectively remotely in cross-functional teams.
• Ability to meet deadlines and produce quality work.
• Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint.

• Scripting:
  Advanced Python or bash for custom automation and Lambda-based lifecycle hooks.
• Kubernetes:
  Operational experience with Amazon EKS, specifically cluster upgrades and worker node group troubleshooting.
• Certification: AWS Certified Solutions Architect or AWS Certified Sys Ops Administrator – Associate.
• Leadership:
  Experience in mentoring junior engineers and contributing to architectural review boards (ARB).

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements. Secret Clearance is required for continued employment.

United States - Remote

• Our company prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
• If the position is remote or hybrid, you may periodically work from a Pantheon Data office location or client…