Direct Connect out of a federal data center, and the routing that makes it behave.
Sienna Systems is seeking a Senior Cloud Engineer to join our U.S. Customs and Border Protection Enterprise Network Architecture & Engineering Services Support (ENAESS) team, in Ashburn, Virginia.
This role sits at the seam between a large, mature on-premises network and AWS. The work is the connectivity itself — Direct Connect, routing at the internet connection point, and the security architecture between the two sides — alongside Trusted Internet Connections 3.0 migration. If you have spent your career either purely on-prem or purely in the console, this is the role that uses both.
Why You'll Want This Role:
- $122,500 – $127,500 based on experience
- $10,000 signing bonus for candidates with an active CBP background investigation, payable after 60 days
- AWS Direct Connect and federal-scale hybrid routing, not a greenfield lift-and-shift
- TIC 3.0 migration work with real architectural latitude
- Established DHS program with a long runway and a stable government customer
- 401(k) with 4% matching, immediate vesting, no restrictions
- 3 weeks Paid Time Off plus 11 Federal Holidays
- Hybrid out of Ashburn, Virginia — no relocation needed if you are already in the DC metro
Key Responsibilities:
- Lead cloud networking engineering and implementation across the enterprise.
- Design, implement, and operate AWS Direct Connect connectivity between government data centers and AWS.
- Engineer routing and security architecture at the internet connection point.
- Support TIC 3.0 migration planning and execution.
- Integrate cloud networking with the existing Cisco ACI fabric and F5 load balancing infrastructure.
- Support colocation implementation and management, including cloud-adjacent connectivity.
- Design, engineer, and implement Software Defined Networking solutions extending to cloud instances.
- Develop and maintain design documentation, and route it through peer review and security approval before implementation.
- Leverage current technologies and best practices to keep the environment secure, resilient, and cost-efficient.
Required Qualifications:
- US citizenship, and the ability to pass a five-year CBP background investigation (SF-85P, Public Trust). Work cannot begin until the investigation is adjudicated.
- Minimum 5 years of relevant cloud engineering experience
- Demonstrated AWS experience, including AWS Direct Connect
- Working knowledge of enterprise network infrastructure — routing, switching, load balancing, firewalls
- Ability to design hybrid connectivity between on-premises data centers and cloud environments
- Ability to produce design documentation to a standard that survives peer and security review
Preferred Qualifications:
- Experience or knowledge of routing at an Internet Connection Point (ICP)
- A favorable CBP background investigation or DHS High Risk background investigation within the past 4 years
- Direct TIC 3.0 migration experience
- AWS certification — Solutions Architect, Advanced Networking, or SysOps
- Cisco networking certification (CCNA or CCNP)
- Federal cloud compliance experience including FedRAMP, NIST 800-53, or FISMA
- Data center move or migration experience
- Prior federal or DHS/CBP program experience
Salary: $122,500 – $127,500 based on experience
Job location: Ashburn, Virginia (hybrid)
Company Benefits:
- Medical/dental/vision insurance
- 401(k) plan: 4% matching, immediate vesting, no restrictions
- 3 weeks Paid Time Off (PTO)
- 11 Federal Holidays
- Long- and short-term Disability coverage
- Company-sponsored Life Insurance coverage
- $10,000 signing bonus for candidates with an active CBP BI (payable after 90 days)
- Hiring Referral Bonus
#LI-AC1