Cloud Engineer

Description

The Leidos Intelligence Group has an opening for senior Cloud Engineer in Reston, Virginia. The successful candidate will work as a member of a government contractor team managing and securing mission critical infrastructure. You will work in a hybrid environment, bridging the gap between unclassified and classified enclaves, while ensuring compliance with federal mandates. You will act as a key technical resource, driving automation, cloud-native modernization, and secure operations across isolated cloud boundaries.

Work will be performed in a fast-paced, high-energy environment inside a government facility.

• Architect, design, and deploy secure, scalable, and highly available solutions (AWS Gov Cloud, Azure, etc) tailored for unclassified and classified environments.
• Ensure seamless hybrid connectivity and secure data replication between unclassified and classified networks/enclaves.
• Provision and maintain Infrastructure as Code (IaC) using tools such as Terraform or AWS Cloud Formation.
• Configure and troubleshoot VPCs/VNets, subnets, routing, security groups, network ACLs, load balancers, DNS, firewalls, VPNs, AWS Transit Gateway, Direct Connect, and Azure Express Route.
• Implement secure network segmentation, private connectivity, traffic inspection, and connectivity between cloud, on-premises, and classified environments.
• Deploy, manage, and troubleshoot containerized workloads and Kubernetes platforms such as Amazon EKS or Azure Kubernetes Service (AKS).

• Implement strict security controls to align with DoD RMF, NIST SP 800-53, and CIS/STIG hardening guidelines across all on-premises and cloud resources.
• Manage Identity and Access Management (IAM), multi-factor authentication (MFA), and secure key management.
• Audit and validate air-gapped or classified cloud environments to ensure they strictly adhere to federal data-at-rest and data-in-transit encryption standards.
• Manage network policies, container image scans, and access logs.
• Implement encryption, private networking, logging, monitoring, and data-protection controls for Amazon workloads in regulated environments.

• Maintain CI/CD pipelines (e.g., Git Lab, Git Hub Actions) for smooth, automated, and audited deployments.
• Monitor cloud system performance, availability, and reliability, proactively resolving infrastructure defects and bottlenecks.
• Troubleshoot complex, interconnected cloud stacks, performing root-cause analysis when operational issues occur.
• Support Kubernetes deployments, scaling, upgrades, patching, logging, monitoring, and application troubleshooting.

• Administer and support on-premises users, servers, virtual machines, storage, and core infrastructure operating within secure air-gapped environments.
• Manage user accounts, permissions, authentication, group policies, and access controls across Windows and Linux systems.
• Perform system provisioning, patching, configuration management, vulnerability remediation, backups, and recovery using approved offline processes.
• Troubleshoot server, application, identity, storage, and connectivity issues while maintaining strict classified-environment security and change-control requirements.
• Support secure transfer, validation, and deployment of software packages, updates, container images, and configuration artifacts into disconnected environments.

• TS/SCI Clearance is required to be considered
• Must be a US Citizen
• BS degree and 8 – 12 years of prior relevant experience or Masters with 6 – 10 years of prior relevant experience. May possess a Doctorate in technical domain. A with a minimum of 3+ years of hands-on, production-level AWS cloud engineering experience.
• Demonstrated ability designing or operating within Azure or AWS Gov Cloud (US) regions.
• Experience with AWS Core services (EC2, S3, VPC, RDS, Route
  53, IAM, Cloud Watch, KMS.)
• Experience supporting users, servers, authentication services, and infrastructure within secure on-premises and air-gapped environments.
• Experience with Terraform or Cloud Formation.
• Experience implementing…