> Markdown version of [/jobs/ext/4459574-cloud-administrator-aws-hybrid-infrastructure](https://www.wearedevelopers.com/jobs/ext/4459574-cloud-administrator-aws-hybrid-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Administrator (AWS / Hybrid Infrastructure)

- **Company:** Cyber Technology Innovations LLC
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $90,000.0 - $135,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, Domain Controllers, Amazon Web Services, Amazon Cloudfront, Amazon Elastic Compute Cloud, Amazon S3, Apache HTTP Server, Bash Shell, BIOS, Command-Line Interface, Cloud Computing, Databases, Data Deduplication, Linux, RAID, Domain Name System (DNS), VMware ESX Servers, Firmware, Identity and Access Management, Internet Information Services (IIS), Subnetting, Virtual Private Networks (VPN), Linux System Administration, Linux Servers, Microsoft SQL Server, Windows Servers, MySQL, NT File System (NTFS), Oracle (Applications), Windows PowerShell, Role-Based Access Control, Remote Access Technology, VMware VSphere, Software Vulnerability Management, S3 Bucket, Scripting, Enterprise Software Applications, Helios, Amazon Virtual Private Cloud (VPC), Amazon Relational Database Service, Bare Metal, Data Management, Route53, Hardware Infrastructure, 3-tier Architectures, Functional Programming, Cloudwatch, Network Server, Vmware
- **Published:** October 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=06ba3aecb4891827

## About the Role

This is a senior-level position. Candidates must have at least seven (7) years of enterprise systems administration experience, with at least three (3) years at a Tier 3 or senior engineer level. If you do not have hands-on production experience with both AWS and Windows/Linux server administration, please do not apply to this listing., * 7+ years of enterprise systems administration, with 3+ years at a Tier 3 or senior engineer level

 * Expert-level Linux and Windows Server administration, including command-line troubleshooting and scripting in Bash and PowerShell
 * AWS SysOps Administrator-level experience with EC2, RDS, S3, Glacier, CloudFront, VPC, Route 53, Lambda, and CloudWatch in production
 * Hands-on VMware vSphere/vCenter experience, including ESXi hosts, VM lifecycle, and snapshots
 * Active Directory administration expertise, including GPOs, FSMO roles, DC replication, and ADAudit Plus or similar tools
 * Experience with Dell PowerScale, Cohesity Helios, or equivalent enterprise storage and backup platforms
 * Working knowledge of NIST 800-53 controls as applied to server hardening and vulnerability remediation

Preferred Qualifications

 * AWS Certified SysOps Administrator - Associate or higher
 * Microsoft Certified: Windows Server Hybrid Administrator Associate or equivalent
 * VMware Certified Professional (VCP-DCV)
 * Prior experience supporting a federal agency IT environment

Clearance: A favorable background investigation, conducted and adjudicated by the Office of Personnel Management (OPM), is required. Selected candidates must be eligible for and obtain an agency suitability determination and complete annual re-badging.

## Description

AWS Cloud Operations

 * Manage and optimize the agency's AWS environment, including EC2 (Amazon Linux and Windows), RDS (MySQL and MS-SQL), S3, Glacier, CloudFront, and VPCs
 * Handle instance lifecycle management, including patching, scaling, S3 bucket policies, Route 53 DNS, VPC routing, Lambda monitoring, and CloudWatch-based performance remediation
 * Carry out IAM user changes per approved requests and maintain account hygiene; coordinate with the agency CISO on GuardDuty, Security Hub, and CloudTrail
 * Administer ADFS and Active Directory integration with AWS identity services

Server Operations & Maintenance

 * Maintain physical Dell servers, Windows and Linux VMs, and VMware ESXi hosts managed through vCenter across on-prem and AWS environments
 * Perform OS patching, firmware/BIOS updates, capacity monitoring, SSL certificate renewals, and service restarts on approved patch schedules
 * Build and maintain Windows and Linux server baseline images (Sysprep, driver injection, licensing validation) in line with the agency's Standard Operating Environment
 * Deploy physical and virtual servers end to end, including rack-and-stack, RAID, iDRAC/iLO, OS install, VPC/subnet assignment, EBS attachment, and hardening
 * Notify the CIO and MSSP security team immediately on security incidents requiring server isolation, and follow incident response protocols aligned with NIST 800-53

Active Directory & Identity Management

 * Maintain domain controller health, including FSMO roles, replication, SYSVOL integrity, and DNS/SRV records
 * Develop and manage Group Policy Objects for all Windows devices on-prem and in AWS, using GPMC and GPResult for auditing
 * Enforce a tiered admin model with RBAC, privileged account de-provisioning, and monthly Domain Admin/Enterprise Admin audits
 * Run AD monitoring and produce automated daily compliance reports for the CIO through ADAudit Plus

Backup, Recovery & Storage

 * Administer Cohesity Helios backups, including scheduling, deduplication, retention, offsite sync, and daily job review
 * Perform file-level, database, and application restores, instant VM recovery, and point-in-time rollbacks; lead annual DR and Bare Metal Recovery exercises
 * Maintain Dell PowerScale (OneFS), Dell Unity, QNAP, and other enterprise storage systems
 * Enforce least-privilege access on storage, including iSCSI mapping, RBAC, ACL auditing, and security posture reporting

Database & Application Server Support

 * Support SQL Server clusters, MySQL, and Oracle servers at the OS level, including patching, certificates, and vendor updates
 * Lead third-party vendor calls, manage vendor remote access/VPN sessions, and maintain IIS and Apache for agency-hosted applications
 * Manage shared drive architecture, NTFS/NFS permissions, and group-based ACL enforcement and auditing