Cloud Engineer
Role details
Job location
Tech stack
Job description
The Cloud Engineer is a senior technical role responsible for architecting, implementing, and managing cloud infrastructure supporting U.S. Army IT managed services. This position bridges legacy on-premises environments with modern cloud-native architectures, ensuring secure, resilient, and cost-effective operations across a hybrid IT landscape.
This is a remote-eligible position. Local candidates in the Roanoke and Radford, Virginia area are encouraged to apply, and work may be performed locally for those who prefer an on -site or hybrid arrangement. The ideal candidate will bring hands-on cloud engineering expertise, strong DoD cybersecurity compliance knowledge, and the ability to support mission-critical Army IT services across enterprise data centers and cloud-hosted environments.
Program Background
The supported organization is one of the longest-standing IT reimbursable Government-to-Government services providers within the United States Army, functioning as a full-spectrum IT managed service provider. The portfolio of services this role directly supports includes:
-
Infrastructure Services, * Design, deploy, and manage cloud infrastructure on FedRAMP-authorized platforms (AWS GovCloud, Microsoft Azure Government, Google Cloud for Government) supporting Army workloads.
-
Lead technical execution of cloud migration efforts including workload assessment, lift-and-shift operations, re-platforming, and cloud-native refactoring.
-
Support on-premises infrastructure environments including servers, storage, networking, and virtualization platforms (VMware, Hyper-V) as part of hybrid cloud operations.
-
Develop and enforce cloud governance policies covering IAM, resource provisioning guardrails, tagging standards, and cost controls.
-
Implement Infrastructure as Code ( IaC ) using Terraform, AWS CloudFormation, Azure Bicep, or equivalent tools to automate provisioning and configuration management.
-
Maintain high availability, disaster recovery (DR), and business continuity plans (BCP) for both cloud and data center environments.
-
Oversee hybrid network connectivity including SD-WAN, AWS Direct Connect, Azure ExpressRoute, and VPN solutions between on-premises and cloud environments.
-
Monitor infrastructure performance and security posture using tools such as CloudWatch, Azure Monitor, Splunk, or similar SIEM/observability platforms.
-
Collaborate with cybersecurity teams to implement NIST 800-53 controls, continuous monitoring ( ConMon ), RMF processes, and FedRAMP compliance requirements.
-
Support FinOps practices including cloud cost analysis, rightsizing recommendations, and budget reporting for reimbursable IT programs.
-
Provide technical documentation including architecture diagrams, runbooks, migration playbooks, and system security plans (SSPs).
-
Mentor junior engineers and contribute to workforce upskilling as the organization transitions to cloud-first operations.
Requirements
Required:
-
5-8 years of hands-on cloud engineering experience, with demonstrated involvement in cloud migration or enterprise IT modernization programs.
-
CompTIA Security+ CE certification - required (DoD 8570/8140 IAT Level II compliant).
-
Active cloud certification required, such as: AWS Solutions Architect (Associate or Professional), Microsoft Azure Administrator or Solutions Architect, or Google Professional Cloud Architect.
-
Active DoD Secret Clearance - required at time of hire.
-
Experience on at least one FedRAMP-authorized cloud platform (AWS GovCloud, Azure Government, or Google Cloud for Government).
-
Proficiency in Infrastructure as Code (Terraform, CloudFormation, Ansible, or equivalent).
-
Strong understanding of networking fundamentals: BGP, VLANs, SD-WAN, firewall policy, and hybrid cloud connectivity.
-
Experience with virtualization and container technologies including VMware, Kubernetes, and Docker.
-
Knowledge of NIST SP 800-53, FISMA, RMF, and DoD cloud security requirements.
-
U.S. Citizenship required.
-
Bachelor's degree in Computer Science , Information Systems, Electrical Engineering, or a related technical field required. Relevant certifications and DoD cloud engineering experience may be considered in lieu of a portion of the education requirement.
Preferred Qualifications:
-
Familiarity with cARMY cloud enclaves or Army Enterprise Data Center (AEDC) environments.
-
Experience with DISA STIGs, DoD Cloud Computing Security Requirements Guide (CC SRG), or IL4/IL5 authorization processes.
-
Knowledge of cloud financial management (FinOps) practices in a government or reimbursable services context.
-
Prior experience supporting data center decommissioning and asset retirement within a federal agency.
-
Experience with Zero Trust Architecture (ZTA) principles and cloud-native security tooling (e.g., AWS Security Hub, Microsoft Defender for Cloud).
-
Additional certifications such as CCNA, CISSP, or CompTIA Cloud+ are a plus.
Work Location:
This position is approved for remote work. Candidates located in or near the Roanoke / Radford, Virginia area are encouraged to apply and may perform work locally or on-site if preferred. Occasional travel to government facilities or data center locations may be required based on mission needs.
Benefits & conditions
-
Competitive compensation commensurate with DoD cloud engineering experience.
-
Comprehensive benefits package including health, dental, vision, and retirement.
-
Remote work flexibility with local on-site option for Roanoke / Radford area candidates.
-
Certification reimbursement and professional development support.
-
Opportunity to directly shape Army cloud-first infrastructure supporting critical national missions.