AWS ProServe Platform Engineer
Digital Management, LLC3 days ago
McLean, VA, USAStaff+
Base Salary
$122k - $152k/yr
Responsibilities
- Run ECMA cARMY tenant onboarding through first authenticated deployment, including account vending, landing-zone guardrails, identity federation, VPN, and boundary connectivity.
- Build reusable NIPR and SIPR AWS landing-zone infrastructure with account baselines, service control policies, centralized logging, security services, networking, and KMS key hierarchies.
- Stand up development, test, staging, and multi-region production environments with documented and demonstrated recovery objectives.
- Integrate the platform with AWS SAM application templates through exported networking, KMS, and logging identifiers without replacing application templates.
- Define IL5 authorization boundaries and support NIST, DISA STIG, RMF, SSP, eMASS, Authorizing Official, and SCA-V activities.
- Automate continuous-ATO and ConMon evidence collection, drift detection, dashboards, and 30-day evidence periods.
- Plan and execute migration from a commercial GovCloud account into cARMY using AWS DMS or DynamoDB export and import, including cutover, rollback, and rehearsal runbooks.
- Coordinate knowledge transfer, repository commits, pipeline execution, operational rehearsals, runbooks, and architecture decision records.
Requirements
- Prior experience taking at least one Army tenant through ECMA cARMY onboarding to first authenticated deployment is required.
- At least 10 years of cloud infrastructure experience, including at least 5 years in AWS GovCloud or DoD environments.
- Experience with AWS Control Tower or Landing Zone Accelerator, AWS Organizations, service control policies, IAM Identity Center, centralized logging, Security Hub, GuardDuty, and AWS Config conformance packs.
- Direct experience with the DoD Cloud Computing SRG, RMF, NIST SP 800-53 Rev. 5, eMASS, Authorizing Official reviews, and SCA-V review cycles.
- Production-quality infrastructure-as-code experience with CloudFormation and AWS SAM; CDK or Terraform is acceptable when integrated with the SAM application layer.
- Experience with Lambda, API Gateway, DynamoDB, EventBridge, SQS, KMS, WAF, VPC endpoints, Route 53 failover, AWS DMS, and DynamoDB export/import.
- Experience automating DISA STIG hardening for cloud and serverless resources is required.
- Bachelor's degree in IT, computer science, or a related field, or equivalent experience.
- AWS Certified SysOps Administrator – Associate or higher is required; AWS Certified Solutions Architect – Professional is expected.
- AWS Certified Security – Specialty or DevOps Engineer – Professional is preferred.
- Must be DoD 8140 compliant for the IAT/IAM functions performed.
- Prior SIPR or IL6 enclave build-out, DISA SIPRNet coordination, Army Cross-Domain Solution familiarity, OSCAL and Security Hub-to-eMASS automation, and GovCloud FinOps experience are preferred.
Benefits
- Virtual health visits, commuter perks, pet insurance, and entertainment discounts.
- Annual performance reviews, tuition assistance, and internal career growth opportunities.
- 401(k) matching, life and disability insurance, and financial wellness tools.
- Healthcare coverage, wellness programs, flu shots, and biometric screenings.
- Annual awards, service anniversary recognition, referral bonuses, and peer-to-peer recognition.
About Digital Management, LLC
Digital Management, LLC (DMI) delivers managed IT and digital services—managed mobility, cloud, cybersecurity, network operations, application development, data, and customer experience—to public-sector agencies and commercial enterprises. The privately held firm is headquartered in McLean, Virginia, and builds and operates mission‑critical systems for U.S. federal clients, including the Department of Defense. Its business centers on long‑term managed services, systems integration, and modernization projects across mobile and cloud environments.