> Markdown version of [/jobs/ext/2037391-cloud-infrastructure-engineer-aws-active-ts-sci-clearance](https://www.wearedevelopers.com/jobs/ext/2037391-cloud-infrastructure-engineer-aws-active-ts-sci-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Infrastructure Engineer - AWS (Active TS/SCI Clearance) - **Company:** Strategic Business Systems, Inc. - **Location:** Chantilly, VA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Audit Trail, Cloud Computing, Cloud Computing Security, Continuous Integration, Domain Name System (DNS), Identity and Access Management, IP Routing, Subnetting, Python (Programming Language), Windows PowerShell, Security Information and Event Management, Data Logging, Scripting, Cloud Platform System, Amazon Virtual Private Cloud (VPC), Cloudformation, Gitlab-ci, Information Technology, Route53, Cloudwatch, Terraform, Jenkins, Plan of Action and Milestones - **Published:** August 12, 2026 - **Apply:** https://www.disabledperson.com/jobs/74190264-cloud-infrastructure-engineer-aws-active-ts-sci-clearance ## About the Role * U.S. Citizenship and active Top Secret / SCI clearance. * Five (5) or more years of hands-on AWS engineering experience, including building environments frominception(greenfield). * Demonstrated experience designing multi-account AWS architectures and AWS Landing Zone patterns. * Advanced AWS networking knowledge: VPC design, Transit Gateway,PrivateLink, hybrid DNS, and on-premises connectivity patterns. * Proficiencywith Infrastructure-as-Code, specifically Terraform and/or AWS CloudFormation, including module design and state management. * Experience implementing AWS security controls, IAM at scale, KMS, audit logging, and resource-based policies. * Familiarity working in classified or highly regulated environments and producing artifacts suitable for compliance review. * Bachelor's degree in Computer Science, Engineering, or a related discipline or equivalent professional experience. * Clear written and verbal communication skills for technical documentation, stakeholder coordination, and customer-facing delivery. PREFERRED QUALIFICATIONS * Prior delivery experience in AWS GovCloud (US), AWS Secret Region / AWS Secret-West, or AWS Top Secret-East/West. * Working knowledge of DISA STIGs, NIST SP 800-53 / 800-171, and the DoD Cloud Computing Security Requirements Guide (SRG). * Direct experience supporting Risk Management Framework (RMF) / Authority to Operate (ATO) packages (SSP, control implementation, POA&M). * Experience with CI/CD for infrastructure (GitLab CI, Jenkins, AWSCodePipeline). * Scripting in Python or PowerShell for automation and integration tasks., * AWS Certified Solutions Architect Professional * AWS Certified Advanced Networking Specialty * AWS Certified Security Specialty * HashiCorpCertified: Terraform Associate * HashiCorpCertified: Terraform Authoring & Operations Professional ## Description SBS is expanding its AWS Professional Services delivery team to support a high-prioritynational-securityprogram. As a Senior Cloud Infrastructure Engineer, you will design and stand up secure, multi-account AWS Landing Zones in air-gapped and classified regions that serve as the foundational platform for downstream mission applications. You will partner directly with AWS Professional Services architects and government technical leads, owning architecture decisions across networking, identity, security, and automation., * Design and deploy AWS Landing Zones in air-gapped, classified regions, including AWS Control Tower equivalents and account-vending automation. * Architect multi-account AWS organizations withappropriate OrganizationalUnit (OU) structure, Service Control Policies (SCPs), and tag governance. * Build andmaintainInfrastructure-as-Code modules in Terraform (and AWS CloudFormation whererequired) for repeatable, auditable deployments. * Configure VPCs, subnets, route tables, Transit Gateways, VPC endpoints, DNS (Route 53 / hybrid resolvers), and private connectivity to on-premises enclaves. * Implement IAM policies, permission boundaries, role federation, and break-glass procedures aligned to least-privilege principles. * Stand up centralized logging, audit, and monitoring (CloudTrail, Config,GuardDuty, Security Hub, CloudWatch) and integrate with the customer's SIEM. * Integrate the cloud platform with enterprise identity (e.g., Identity, Credential, and Access Management (ICAM); Personal Identity Verification (PIV); Common Access Card (CAC)) and compliance tooling. * Collaborate with AWS Professional Services, mission application teams, and the customer's Risk Management Framework (RMF) / Authority to Operate (ATO) authorizing officials. * Produce architecture diagrams, runbooks, and design decision records suitable for ATO body-of-evidence packages. ## Related Videos - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)