Network​/Infrastructure Engineer; Remote

Overview

Safeguard the connectivity backbone of a mission‑critical VA cloud platform.

Remote in any United States jurisdiction not excluded (exclude AK, CA, CO, CT, DC, HI, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WY).

The Network/Infrastructure Engineer supports network architecture, VPC design, subnet configuration, IAM policies, security groups, routing, PKI operations, and TLS certificate lifecycle management.

• Owns all VPC networking including subnet design, route tables, security groups, NACLs, VPC peering, and Transit Gateway configurations
• Implements and maintains PKI operations including TLS certificate issuance, renewal, rotation, and integrity for all platform capabilities and applications
• Maintains a complete and accurate certificate inventory including ownership, usage, expiration dates, and renewal mechanisms
• Ensures 100% of network and infrastructure configuration is provisioned exclusively through approved IaC tooling (Terraform)
• Detects and remediates configuration drift weekly
• Implements and enforces Zero Trust Architecture and least‑privilege principles across all IAM policies, roles, and service accounts
• Supports development of the Multi‑Region Enablement Plan including network failover strategies and DNS‑based routing
• Participates in daily Change Control Board (CCB) meetings for all network‑related changes
• Ensures all production changes have documented back‑out plans and post‑implementation validation within 2 hours
• Contributes network performance metrics, certificate compliance status, and VPC connectivity availability data to the Monthly Maintenance Report

The annual projected pay range is $79,574 – $100,317.

• Medical, dental, vision and prescription drug coverage for you and your family
• Life Insurance, short‑term disability and long‑term disability paid by the Company
• Supplemental coverages including Accident, Critical Illness, and Hospital
• Additional Life insurance coverage for you and your dependents
• 401(k) plan with various options to select based on your retirement goals

• 3 years of experience in cloud network engineering and infrastructure
• Bachelor's Degree in computer science, information technology, network engineering, or related field

• Excellent experience designing and managing AWS VPC networking including subnets, route tables, security groups, NACLs, VPC peering, Transit Gateway, Private Link, and VPN configurations
• Excellent knowledge of PKI operations including TLS certificate issuance, renewal, rotation, and integrity management

• Active Federal Civilian Public Trust clearance
• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years

• Remote assignment
• Sedentary work; occasional exertion up to 10 pounds
• Typing, communication, repetitive motions
• Close visual acuity for computer monitoring, presentation screens, etc.
• Inside environmental conditions with protection from outside elements

All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law.