> Markdown version of [/jobs/ext/3937631-cloud-engineer-secret-clearance-required](https://www.wearedevelopers.com/jobs/ext/3937631-cloud-engineer-secret-clearance-required). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Engineer - Secret Clearance Required

- **Company:** System One
- **Location:** Washington, DC, United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Bash Shell, Cloud Computing, Cloud Engineering, Identity and Access Management, Python (Programming Language), Key Management, SAP (Applications), Cloud Platform System, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), SC Clearance, Gitlab-ci, Information Technology, Hashicorp, Terraform, Devsecops
- **Published:** October 26, 2026
- **Apply:** https://www.dcjobsite.com/job.asp?id=3467224260&tx=UT5147TTZ&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* AWS SAA certification minimum (AWS SAP preferred)
 * AWS Security Specialty certification strongly preferred
 * HashiCorp Terraform Associate
 * DoD 8570/8140 IAT II certification
 * Federal experience with DoD cloud environments essential
 * SCCA-compliant design experience strongly preferred

## Description

* Onsite @ Pentagon 2-days/week, clearance: Secret
 * Build Landing Zone including AWS Organizations, SCPs, account vending, KMS, monitoring stack, and Infrastructure as Code (IaC)
 * Develop and maintain DevSecOps pipeline
 * Design and implement AWS GovCloud solutions (specifically AWS GovCloud, noting that commercial AWS is not the same)
 * Proficiency with Terraform, including module design and remote state management
 * Design AWS Organizations and Service Control Policies (SCPs)
 * Configure IAM Identity Center
 * Manage AWS networking components such as Transit Gateway (TGW), VPC, VDSS/VDMS
 * Design Key Management Service (KMS) Customer Master Key (CMK)
 * Employ AWS security services including GuardDuty, Security Hub, CloudTrail, Inspector, Config
 * Use GitLab CI/CD for automation
 * Implement OPA/Sentinel policy-as-code
 * Utilize Python and Bash scripting
 * Demonstrate familiarity with DISA Cloud Computing SRG, System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.