Automation / Cloud Services Engineer

The Automation / Cloud Services Engineer supports the Marine Corps Tactical Systems Support Activity (MCTSSA) Infrastructure and Information Services Division (I2SD) by designing, deploying, and maintaining secure private, hybrid, and multi-cloud infrastructure that hosts critical Command, Control, Communications, Computers, Cyber, and Intelligence (C5I) applications for engineering, test, and experimentation. The individual is responsible for installing, configuring, patching, and administering the VMware Cloud Foundation (VCF) private cloud (vSphere, vSAN, NSX, and Aria Suite) in a Department of War (DoW) IL5-compliant environment, enforcing NSX micro-segmentation to realize Zero Trust objectives, and maintaining continuous compliance with DISA STIGs.

The engineer architects and implements resilient hybrid-cloud and container-orchestration frameworks (such as Kubernetes, Tanzu, and OpenShift) spanning on-premises private clouds and DoW-approved public clouds (AWS, Azure, and GCP), and provisions multi-tenant virtual machines, containerized workloads, and serverless architectures across development, test, and production enclaves in accordance with DoW Secure Cloud Computing guidelines. The individual builds and maintains an Infrastructure-as-Code (IaC) and configuration management framework using Ansible, Terraform, and CI/CD pipelines to automate provisioning, configuration compliance, and application deployment, committing all source code daily to the Government Git/GitLab repository.

The engineer provides continuous monitoring, governance, and cost optimization of hybrid-cloud infrastructure to sustain greater than 99.9% availability, and produces version-controlled documentation, blueprints, and README files that allow the Government to rebuild any environment from bare metal to operational status. The role also supports assigned test events, contributes to System Security Plans (SSPs) and related cybersecurity documentation, and provides technical representation at working groups and meetings as required.

This is a full-time position scheduled to work standard business hours from 8:00 a.m. to 5:00 p.m. Occasional work outside standard hours may be required to support scheduled maintenance windows, deployments, test events, or critical incident response., * Five years of hands-on experience designing, deploying, and administering enterprise virtualization and cloud infrastructure, preferably within DoD/DoW environments.

• Hands-on experience installing, configuring, patching, and administering VMware Cloud Foundation (VCF) components, including vSphere, vSAN, NSX, and Aria Suite, and implementing NSX micro-segmentation policies.
• Experience architecting, deploying, and securing container-orchestration platforms such as Kubernetes, VMware Tanzu, or Red Hat OpenShift, including hardening containers to the DoW Container Hardening Guide.
• Experience designing and operating secure, multi-tenant hybrid and multi-cloud architectures in at least one DoW-approved public cloud (AWS, Azure, or GCP), including cloud-native and on-premises service meshes for secure service-to-service communication.
• Proficiency developing, testing, and maintaining declarative automation code (Ansible playbooks, Terraform configurations) for network devices (Arista and Cisco switches), virtual hosts, and operating systems.
• Experience building and maintaining CI/CD pipelines and source control workflows using Git/GitLab to automate testing and deployment.
• Administrator-level knowledge of Windows Server, Red Hat Enterprise Linux, and VMware ESXi, including patching, DISA STIG hardening, and integration with enterprise storage, backup systems, and Active Directory/LDAP services.
• Working knowledge of Zero Trust Architecture principles (NIST SP 800-207) and DoW IL5/IL6 cloud security requirements.
• Experience using cloud monitoring suites to track resource utilization, scale instances to handle traffic spikes, cost-optimize resources, and maintain high availability (greater than 99.9%).
• Proficiency in scripting languages such as Python, PowerShell, and Bash to automate repetitive tasks.
• Familiarity with the Risk Management Framework (RMF) and developing System Security Plans (SSPs) and related cybersecurity documentation.
• Strong written and verbal communication skills, including the ability to produce clear, version-controlled technical documentation, system blueprints, and operational guides, and to explain complex technical topics to non-technical audiences.
• Possess a DoD 8140-compliant certification appropriate for privileged system access (e.g., CompTIA Security+ CE or higher) upon onboarding.
• Possess one of the following certifications upon onboarding:
• VMware Certified Professional - VMware Cloud Foundation Administrator (VCP-VCF Admin)
• AWS Certified Solutions Architect - Associate
• Microsoft Certified: Azure Administrator Associate
• Certified Kubernetes Administrator (CKA)
• Red Hat Certified Engineer (RHCE)
• Obtain one of the following certifications within 9 months of onboarding:
• HashiCorp Certified: Terraform Associate
• Certified Kubernetes Security Specialist (CKS)
• AWS Certified Solutions Architect - Professional
• Microsoft Certified: Azure Solutions Architect Expert

Competencies for the role

The Automation / Cloud Services Engineer demonstrates advanced expertise in private, hybrid, and multi-cloud architecture, virtualization, and container orchestration within secure DoW environments. This role requires an automation-first mindset, with the ability to translate manual processes into repeatable Infrastructure-as-Code and CI/CD workflows that reduce provisioning time and eliminate configuration drift. The individual applies Zero Trust and DISA STIG requirements to every layer of the environment, troubleshoots complex issues methodically, and documents work so thoroughly that the Government can reconstruct any environment independently.

Physical Requirements for the role

This position is primarily sedentary and requires the ability to work at a computer for extended periods, including viewing monitors, using keyboards, and operating standard office equipment. The role requires occasional standing and walking in server rooms and data center environments, and occasional lifting of IT equipment up to 25 pounds., Secret. Candidates must possess an active SECRET clearance and maintain it throughout employment. This position may be designated IT-I or IT-II, which requires a favorably adjudicated Tier 5 or Tier 3 investigation, respectively.

Salary will be determined based on the individual’s education and experience level.