AWS Cloud Engineer (Zero Trust Focus)
Nakupuna Companies2 years ago
Arlington, VA, USAMid Level
Base Salary
$115k - $145k/yr
Responsibilities
- Provision and configure AWS services and infrastructure using AWS CDK and Infrastructure as Code.
- Build and maintain data and log transformation pipelines using AWS Lambda, Firehose, Glue, and related services.
- Write and debug Python Lambda functions to automate operational and security processes.
- Prototype and evaluate AWS AI/ML services and emerging AWS-native tools for automation, analytics, and operational efficiency.
- Implement Zero Trust principles, including least-privilege access, continuous authentication, and micro-segmentation, in AWS architectures.
- Operate AWS environments by creating EC2 instances, provisioning users, managing credentials, configuring backups, reviewing logs, and troubleshooting connectivity.
- Configure and manage AWS Config, Systems Manager, and Patch Manager.
- Support DevSecOps integration, automated testing, release pipelines, and automated deployments using AWS CodePipeline.
- Support migration to serverless AWS offerings and reduce the operational footprint of EC2 instances.
- Perform security hardening according to DoD STIG guidance, support IAVA patching, and maintain required security documentation.
- Upgrade server operating systems and applications, assist with the AWS GovCloud installation, and provide technical troubleshooting support.
- Coordinate AWS infrastructure initiatives, including planning, scheduling, budget tracking, stakeholder collaboration, and oversight.
- Develop and maintain system documentation, topology information, and Standard Operating Procedures.
Requirements
- Bachelor’s degree in a STEM field or equivalent years of related work or military experience.
- At least 3 years of relevant professional experience, including systems administration and cloud operations.
- Experience developing AWS solutions with AWS Cloud Development Kit.
- Experience writing and debugging Python scripts; object-oriented programming experience is preferred.
- Experience designing and developing high-availability virtual platforms and monitoring virtual system performance.
- Strong system documentation, configuration, topology, and Standard Operating Procedure development skills.
- Active IAT II certification, such as CASP+, CySA+, CISSP, or Security+.
- AWS certification is required, such as AWS Certified AI Practitioner, AWS Certified Cloud Practitioner, AWS SysOps Administrator Associate, or AWS Solutions Architect Associate.
- Experience supporting DoD IT environments is preferred.
- Experience with JIRA and Agile methodologies is desirable.
- Current Top Secret security clearance and U.S. citizenship are required.
Benefits
- Position is based in Arlington, Virginia, with a preference for working onsite three days per week; fewer onsite days may be considered.
- Occasional travel of one to two weeks per year within the Continental United States or to Hawaii may be required.
- Work outside normal business hours, including evenings and weekends, may be required for operational or project demands.