Senior Cloud Engineer Security Clearance

Position: Senior Cloud Engineer with Security Clearance
Vanguard Defense Solutions is seeking a senior Cloud Engineer to own the architecture of the hybrid-cloud environment supporting the Missile Defense Agency Information Management and Software Services (AIMSS) program at Redstone Arsenal, where we serve as a subcontractor to Integration Innovation, Inc. (i3). Position Summary This is the senior-most cloud seat on our team. You will set the reference architectures the software, Dev Sec Ops , and cyber teams build against, drive technical design with leads and product owners, and keep the environment secure, performant, and accreditation-ready as it scales.

We are a small, team-focused defense contractor. There is no layer of program bureaucracy between an engineer and a decision, and the patterns you set here will hold for the life of the contract. This role is on-site at Redstone Arsenal in Huntsville, AL.

Key Responsibilities
* Own the architecture of the government-provided hybrid cloud environment, designing for security, performance, operability, and scale as program requirements evolve
* Develop and maintain cloud reference architectures and documented baselines that development and engineering teams build against
* Drive technical design with technical leads and product owners, translating solution requirements into architectural patterns the team can execute
* Design and govern the Terraform baseline for provisioning and managing cloud resources, ensuring consistent, repeatable deployments across environments
* Architect and oversee Azure Kubernetes Service (AKS) for containerized deployment, scaling, and orchestration, including image hardening in the deployment pipeline
* Design identity, access, and encryption architecture using Microsoft Entra , Azure Key Vault, and RBAC, and set the standards that keep them consistent
* Establish and maintain DISA STIG compliance and the technical artifacts supporting the RMF and accreditation process, so compliance is a byproduct of how the platform is built
* Architect virtual networking (virtual networks, subnets, network security groups, hybrid connectivity) for secure and efficient traffic flow
* Resolve application-to-platform integration issues across PaaS and IaaS offerings, and provide senior technical support to developer and cyber teams
* Support the machine learning, data analysis, data visualization, and event-driven architecture work the program depends on
* Create and maintain comprehensive documentation for system architecture, configurations, and operational procedures

Required Qualifications
* Bachelor's degree in a relevant technical field and a minimum of 12 years of relevant experience (a government labor category minimum; see the application note below)
* Demonstrated experience designing, not only administering, hybrid cloud environments, including migration of on-premise applications and infrastructure to the cloud
* Hands-on Terraform experience at scale, including module structure, state management, and drift control
* Hands-on experience with Azure Kubernetes Service (AKS) or equivalent container orchestration, and with CI/CD pipelines using Azure Dev Ops, Git Lab, or Jenkins
* Advanced knowledge of Microsoft Entra  RBAC, and experience with Azure Key Vault, Azure Monitor, Log Analytics, and Microsoft Defender for Cloud
* Experience hardening systems to DISA STIGs and supporting RMF or ATO documentation
* Strong understanding of Azure networking, including VNet peering, VPN Gateway, and Express Route
* Linux and Windows server administration, including patching, configuration, and troubleshooting
* Active Secret security clearance, and the ability to maintain the clearance required for this position
* U.S. citizenship
* Residence within a 75-mile radius of Redstone Arsenal, or willingness to relocate before the start date, with the ability to reliably commute to the customer site as business needs dictate Certifications (must have, or obtain before starting)
* CompTIA Security+ CE, or another approved DoD 8570.01M IAT Level II certification
* One of:
Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate, AWS Certified…