> Markdown version of [/jobs/ext/4030203-cloud-network-engineer-aws-ts-sci-on-site-scif](https://www.wearedevelopers.com/jobs/ext/4030203-cloud-network-engineer-aws-ts-sci-on-site-scif). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Network Engineer (AWS) - TS/SCI - On-Site SCIF

- **Company:** D9tech Resources LLC
- **Location:** Herndon, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, DevOps, Virtual Private Networks (VPN), Network Architecture, Network Connections, Cloud Services, SAP (Applications), Cloud-native Network Functions (CNF), Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Route53
- **Published:** October 30, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9277377/cloud-network-engineer-aws-tssci-on-site-scif

## About the Role

Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required

 - Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
 - Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
 - 5+ years in network engineering, including 3+ years in AWS networking
 - Experience with classified network boundaries and cross-domain connectivity
 - Hands-on experience with AWS cloud services
 - Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
 - DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable, Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
 - AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
 - AWS Advanced Networking Specialty or CCNP

## Description

D9Tech Resources, LLC is hiring in support of a national security cloud program. Design and run network architecture for classified AWS environments, including cross-region and external connectivity, across mission projects. All work is performed on-site in a SCIF.

Responsibilities

 - Design VPCs, VPC endpoints and routing, including for Amazon WorkSpaces
 - Manage IP allow-listing and cross-region connectivity between GovCloud and classified regions
 - Build and support external and partner network connections
 - Design with Transit Gateway, segmentation, Direct Connect and VPN
 - Configure Route 53 Resolver, security groups, NACLs and AWS Network Firewall to meet ATO
 - Coordinate with boundary and cross-domain teams