> Markdown version of [/jobs/ext/1208839-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/1208839-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Engineer - **Company:** Ellumen, Inc - **Location:** Silver Spring, MD, United States (Remote available) - **Experience:** Expert - **Salary:** $110,000.0 - $120,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Amazon S3, Cloud Computing, Cloud Engineering, Continuous Integration, DevOps, Domain Name System (DNS), Federal Information Processing Standards (FIPS), Identity and Access Management, IT Management, Key Management, Public Key Infrastructure, Scrum Methodology, Software Deployment, Management of Software Versions, SSL Certificate Management, Data Logging, Cloud Platform System, Amazon ElastiCache, Kubernetes Helm Charts, Amazon Virtual Private Cloud (VPC), Kubernetes, Infrastructure Automation Frameworks, Hashicorp, Route53, Terraform, Devsecops - **Published:** July 8, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17504363?backUrl=%2Fcareer%2F17504363%2FCloud-Engineer-Maryland-Silver-Spring ## About the Role * Demonstrated experience in cloud infrastructure engineering and operations for Federal or enterprise environments * Hands-on experience with AWS Elastic Kubernetes Service (EKS), Kubernetes cluster operations, and containerized application deployment * Proficiency with Infrastructure as Code tooling, specifically Terraform, for provisioning and managing cloud infrastructure * Experience with CI/CD pipeline operations and DevSecOps workflows including build, test, deploy, and promotion processes * Hands-on experience with secrets management tools (AWS Secrets Manager, HashiCorp Vault, or Kubernetes secrets) * Experience with PKI operations including TLS certificate management using AWS Certificate Manager, HashiCorp Vault, or equivalent * Experience with AWS Backup, Velero, or equivalent backup and recovery tooling for Kubernetes environments * Knowledge of S3 operations including Cross-Region Replication, lifecycle policies, versioning, and encryption * Experience with Route 53 DNS management, health checks, and failover configurations * Familiarity with configuration drift detection and remediation practices * Knowledge of AWS managed services (RDS, ElastiCache, DocumentDB, Kinesis, MSK, Athena) * Experience with Helm charts and Kubernetes deployment manifests for application deployment * Experience working in Agile or SAFe environments * AWS Solutions Architect Associate or AWS Certified DevOps Engineer * Certified Kubernetes Administrator (CKA) or equivalent certification * Bachelor's Degree from an accredited academic institution with a minimum of 5 years of experience in cloud infrastructure engineering and operations for Federal or enterprise IT environments, * Department of Veterans Affairs (VA) experience * Active Personal Identity Verification (PIV) card * Experience operating in AWS GovCloud or equivalent FedRAMP-authorized cloud environments * Experience with FIPS 140-3 encryption requirements and Federal security compliance standards * Experience managing platforms supporting 200+ applications across multiple environments ## Description Description: The Cloud Engineer executes day-to-day infrastructure operations, deployment, and maintenance for a complex, mission-critical cloud platform hosted in AWS GovCloud supporting 300+ applications and services across production, staging, and sandbox environments. This role manages EKS clusters, CI/CD pipeline operations, secrets and certificate management, backup and recovery automation, S3 lifecycle management, failover automation, and configuration drift remediation, ensuring all changes are integrated into approved DevSecOps workflows and Infrastructure as Code practices. Responsibilities: * Deploy and maintain EKS clusters, VPC infrastructure, IAM configurations, and networking across all platform environments using approved Terraform IaC templates * Manage day-to-day operations of 3,000+ CI/CD pipelines supporting 130+ monthly production releases across 288 production services * Implement and operate centralized secrets management ensuring automated rotation for 100% of production secrets where automation is supported and manual rotation at least every 90 days for non-automated secrets * Manage Public Key Infrastructure operations including TLS certificate issuance, renewal, rotation, storage, and integrity ensuring zero disruption to production services and 100% renewal no later than 30 days prior to expiration * Configure and maintain AWS Backup and VA-approved Kubernetes-native backup tooling for cross-region snapshot replication with independent per-region encryption * Manage S3 Cross-Region Replication configurations, lifecycle policies, and Intelligent-Tiering for mission-critical image data * Execute failover automation procedures: Route 53 health-check configuration, DNS failover activation, and secondary-region infrastructure management * Perform automated configuration drift detection at least weekly and remediate identified drift within three business days * Ensure all environment changes are fully validated in non-production environments prior to deployment to production * Conduct post-deployment production verification testing within two hours of each production change * Prepare and maintain documented backout and rollback plans for 100% of production changes * Support application teams with manual deployments and other work through ticketed and CCB-managed processes * Manage node lifecycle including detection, cordon, drain, and replacement of failed nodes within 30 minutes * Ensure autoscaling policies prevent resource saturation exceeding 80% for more than five minutes * Monitor EBS volume utilization ensuring volumes do not exceed 80% for more than one hour * Ensure 100% of platform components are integrated with centralized logging and monitoring solutions * Support phased software upgrades progressing through sandbox, staging, and production with documented validation procedures and rollback plans * Participate in daily Change Control Board meetings and on-call rotation * Participate in Agile and SAFe ceremonies including sprint planning, backlog refinement, demos, and retrospectives ## Related Videos - [Seriously gaming your cloud expertise: from cloud tourist to cloud native](https://www.wearedevelopers.com/videos/373-seriously-gaming-your-cloud-expertise-from-cloud-tourist-to-cloud-native) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)