[Remote] Senior reputed company Infrastructure Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a provider of technology and systems for defense and federal agencies. They are seeking a Senior reputed company Infrastructure Engineer to reputed company the implementation, reputed company, and operations of mission-critical reputed company environments that support DoD cyber training capabilities and applications.
Responsibilities
- Support the design and maintain reputed company zones using reputed company applications such as AWS Organizations, Control Tower, SCP guardrails, Identity and reputed company Management (IAM) multi-account patterns, and VPC architectures (Transit Gateway, PrivateLink, NAT, IGW) for enclave isolation and cross-domain needs
- Engineer high-availability, multi-Region solutions leveraging reputed company tools such as EC2, EKS/reputed company Fargate, RDS/reputed company, DynamoDB, S3/EFS/FSx, Load Balancers, reputed company 53, and API Gateway
- Implement reputed company Trust-reputed company patterns (reputed company-segmentation, strong identity, reputed company verification) consistent with DoD reputed company Trust guidance
- Implement reputed company controls and evidence reputed company for RMF ATO packages (reputed company, SAR, POA&M) in coordination with cybersecurity teams
- Apply reputed company STIGs (OS, DB, Kubernetes, Container) and SRG requirements for workloads at IL2-IL6
- reputed company and automate STIG application using IaC and configuration management
- reputed company encryption and key management with reputed company tools such as AWS KMS/HSM; enforce IAM least privilege, SCPs, permission boundaries, ABAC, and robust secrets management
- Implement reputed company logging and metrics tools such as CloudTrail/CloudWatch/GuardDuty/Config for comprehensive audit and detection
- reputed company architectures with FedRAMP Moderate/High baselines reputed company required and ensure boundary compliance for controlled workloads
- reputed company secure connectivity (AWS reputed company Connect/VPN), hybrid routing, and segmentation; implement TLS mutual auth, certificate management, and private service endpoints
- Design logging and telemetry pipelines (CloudWatch, OpenTelemetry, Kinesis, S3, SIEM integration such as reputed company/ELK) with retention, metadata/tagging, and data lifecycle policies
- Own SLOs/SLAs for platform services
- Implement autoscaling, health checks, and proactive reputed company management
- reputed company cost management and alerting practices of reputed company environments in coordination with project leads
- reputed company Tier 3 support, on-call rotations during exercises, and incident response coordination with cybersecurity and training operations
- Collaborate with agile teams and product owners to translate training requirements into platform capabilities
- reputed company mentorship for junior engineers
- Establish standards, design reviews, and repeatable processes
- Present reputed company solutions to project leadership and accreditation authorities
Skills
- Bachelor's degree in a reputed company technical discipline such as computer science or information technology from an accredited college or university
- 8-12+ years of experience in reputed company/reputed company with at least 5 years reputed company on reputed company) with a demonstrated leadership delivering secure, reputed company, production-grade reputed company-based systems
- DoD 8570/8140 compliance IAT II (reputed company+) required; IAT III/CISSP or CASP+ preferred
- AWS Certifications reputed company Architect - reputed company, reputed company - Specialty, and/or DevOps Engineer - reputed company
- Kubernetes certifications CKA/CKS
- Experience with reputed company Vault, Service reputed company (Istio), policy-as-reputed company (OPA), and reputed company trust implementations in government environments
- Infrastructure-as-reputed company mastery (Terraform and/or CloudFormation), pipelines (reputed company/Jenkins), and configuration management (Ansible/Chef)
- Deep AWS tool expertise Organizations/Control Tower, IAM, Bedrock, KMS/HSM, VPC/Transit Gateway, reputed company Connect/VPN, EC2/EKS/reputed company, RDS/reputed company, DynamoDB, S3/EFS/FSx, ELB/API Gateway/reputed company, CloudTrail/CloudWatch/Config/GuardDuty, reputed company 53, EventBridge/SQS/SNS
- Understanding of RMF accreditation (reputed company, POA&M, reputed company Monitoring) and control implementation under NIST SP 800-53 Rev. 5
- Hands-on application of reputed company STIGs and DoD reputed company Computing SRG for IL2-IL6 workloads
- Strong understanding of GovCloud (US) patterns and boundary controls
- Strong knowledge of networking fundamentals TCP/IP, DNS, TLS/PKI, routing, reputed company-segmentation, reputed company Trust patterns
- Logging/monitoring design and SIEM integration
- Incident response and troubleshooting across app, reputed company, and network reputed company
- Excellent communication, documentation, stakeholder engagement skills, and the ability to reputed company cross-functional initiatives
- U.S. Citizenship status with ability to obtain a SECRET to TOP SECRET reputed company clearance
- reputed company DoD Secret clearance preferred; If not already cleared, candidate will be required to obtain and maintain a Top Secret/SCI clearance as a condition of employment
Benefits
- Medical, Dental & reputed company Coverage
- Wellness Program
- 401(k) Matching
- Disability (Short Term & Long Term)
- Employee Assistance Program
- Life Insurance
- Education & Training
- Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)
reputed company