Cloud Engineer (Multi -Cloud)

Location: Ashburn, VA

Clearance: Top Secret (or able to obtain)

Salary Rate: $130,000-$170,000

Our client is seeking a skilled Cloud Engineer to support a DHS-cleared program in Ashburn, VA. The Cloud Engineer will design, build, and operate secure, highly available infrastructure across AWS, Microsoft Azure, and Google Cloud Platform (GCP), with a strong emphasis on DevOps automation, infrastructure as code, and CI/CD pipeline engineering. This role partners closely with development, security, and operations teams to deliver scalable cloud solutions that meet federal government mission and compliance requirements.

•     Design, deploy, and maintain cloud infrastructure across multi-cloud environments, including AWS, Azure, and Google Cloud Platform.

•     Build and manage Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or ARM/Bicep templates.

•     Design, implement, and maintain CI/CD pipelines to automate build, test, and deployment processes (e.g., Jenkins, GitLab CI, AWS CodePipeline, Azure DevOps).

•     Implement containerization and orchestration solutions using Docker and Kubernetes (EKS, AKS, or GKE).

•     Configure and manage cloud networking, identity and access management (IAM), and security groups in accordance with federal security requirements.

•     Monitor cloud environments for performance, cost, and security using tools such as CloudWatch, Azure Monitor, Stackdriver, Splunk, or Datadog.

•     Automate configuration management and system provisioning using tools such as Ansible, Chef, Puppet, or Salt.

•     Collaborate with ISSOs and security engineers to ensure cloud architectures meet DHS/FedRAMP security control requirements and support Authorization to Operate (ATO) activities.

•     Troubleshoot and resolve infrastructure, deployment, and pipeline issues across development, test, and production environments.

•     Support disaster recovery, backup, and high-availability architecture design across cloud platforms.

•     Document cloud architecture, deployment processes, and operational runbooks.

•     Stay current on emerging cloud technologies and recommend improvements to existing infrastructure and processes.

•     U.S. Citizenship required.

•     Active DHS clearance/suitability, or ability to obtain and maintain one.

•     Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience in lieu of degree.

•     Minimum of 3–5 years of hands-on cloud engineering experience across one or more of AWS, Azure, or Google Cloud Platform.

•     Demonstrated DevOps experience, including CI/CD pipeline development, automation, and Infrastructure as Code.

•     Experience with containerization and orchestration technologies (Docker, Kubernetes).

•     Strong scripting/programming skills (e.g., Python, Bash, PowerShell, Go).

•     Familiarity with federal cloud security requirements, including FedRAMP and DHS 4300A.

•     Strong problem-solving skills and the ability to work collaboratively across cross-functional teams.

Candidates must hold, at minimum, the following cloud certifications at time of application:

•     AWS Certified (Associate-level or higher, e.g., AWS Certified Cloud Practitioner, Solutions Architect – Associate, or SysOps Administrator)

•     AWS Certified DevOps Engineer – Professional

•     AWS Certified Solutions Architect (Associate or Professional)

•     Additional certifications such as Microsoft Certified: Azure DevOps Engineer Expert, Azure Solutions Architect Expert, or Google Professional Cloud DevOps Engineer / Cloud Architect.

•     Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).

•     Prior experience supporting DHS, CBP, or another federal law enforcement/homeland security agency.

•     Experience with GovCloud environments (AWS GovCloud, Azure Government).

•     Experience with GitOps practices and tools such as ArgoCD or Flux.

•     Security certifications such as Security+ or CISSP.