Cloud Engineer

· Deploy into client environments as the subject-matter expert for your domain: land the capability, integrate it with the client's stack, troubleshoot, and harden. · Bring lessons from every deployment back to your team, improving the standard implementation for the next client. · Mentor junior team members by reviewing their work, sharing best practices, and guiding them through troubleshooting and operational standards. · Contribute to documentation, runbooks, and machine-readable compliance artifacts. · Support both new FedRAMP environment builds and the modernization of existing ones. · Author and peer review detailed design and security documentation, inclusive of vendor best practices. WORK ENVIRONMENT/TRAVEL REQUIRED: Travel: Approximately 10%, driven by client needs U.S. citizenship is required, as this position supports federal compliance programs., Lead design, implementation, automation, and security operations for Azure cloud networking in FedRAMP High/IL4 environments. Build modular IaC (Terraform, ARM, Bicep), implement advanced networking and firewall controls, mentor team members, participate in on-call support, and translate compliance controls into enforceable guardrails. Top Skills: Active DirectoryAksAnsibleApplication GatewayArmAsgAzure Devops BoardsAzure FirewallAzure Virtual Networks (Vnets)BashBicepBitbucketChefCliCloudFormationDisa StigsEksExpressrouteFedramp HighGitGitGksIisIl4Ipv6 RoutingJIRAAzureMicrosoft Sql ServerNist Sp 800-53NsgOpenshiftPalo AltoPowershellPowershell DscPrivate EndpointPrivate LinkPuppetPythonRest ApisTerraformUdrsVpn GatewayVwanWafWindows 11Windows ServerYaml Cystems Logic Inc

Cloud Engineer

22 Days Ago In-Office or Remote 50-55 Hourly Senior level 50-55 Hourly Senior level Information Technology Design, build, and support secure, high-availability cloud environments on AWS/Azure/GCP. Implement landing zones, networking, IAM and security baselines; provision compute, storage, and databases with IaC; build CI/CD and DevSecOps pipelines; containerize and orchestrate applications; implement observability and SRE practices; produce FinOps reports and design documentation; support serverless and event-driven architectures. Top Skills: AWSAws LambdaAzureCi/CdCloud FunctionsContainerizationDevsecopsEvent HubFinops ToolingGCPGoogle Cloud PlatformIamInfrastructure As Code (Iac)Microservice PatternsMonitoring/Observability StacksOrchestrationPub/SubServerlessSnsSqsTerraformVnetVpc, Kroll, The Senior Cloud Engineer will build and maintain cloud platforms, automate infrastructure deployment, and ensure security while collaborating with development teams. Top Skills: Amazon AwsAWSAws CloudformationAzureAzure Resource ManagerKubernetesLinuxOracle DatabasesTerraformWindows

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

· BS or above in a related Information Technology field or equivalent combination of education and experience · 5+ years in cloud, security, or platform engineering · 5+ years supporting cloud architecture, design, implementation, operations, and automation in AWS, Azure, or GCP · Experience with Infrastructure-as-Code and orchestration/automation tools such as Terraform and Ansible · Automation-first mindset with strong Infrastructure-as-Code (Terraform or equivalent), CI/CD, and scripting (Python, Go, or similar); exposure to policy-as-code · Hands-on depth with at least one major cloud platform (AWS, Azure, or GCP) and its native services · Working knowledge of NIST 800-53, FedRAMP, or comparable security control frameworks · The instinct to solve a problem once, properly, and package the solution so it works everywhere · Excellent communication, organizational, and problem-solving skills · Effective documentation skills, including technical diagrams and written descriptions · Ability to work independently and as part of a team with a professional attitude and demeanor · Critical thinking, and the ability to balance security requirements with mission needs REQUIRED CERTIFICATIONS: · Associate-level (or higher) certification in AWS, Azure, or GCP

Bonus Points · Direct familiarity with FedRAMP 20x and Key Security Indicators (KSIs) · Experience with OSCAL or JSON machine-readable compliance formats · Depth in a likely specialty area: identity (SSO, phishing-resistant MFA), SIEM and log pipelines, vulnerability management, or resilience engineering · Relevant certifications such as cloud security specialty certifications, CISSP, or GIAC · Previous experience supporting clients from within a professional services organization · Familiarity with configuration baseline standards such as CIS Benchmarks & DISA STIG · Familiarity with frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, or PC

At Coalfire, you'll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you'll work most effectively - whether you're at home or an office. Regardless of location, you'll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You'll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you'll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options. At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].

Design, build, and deploy repeatable FedRAMP-aligned security capabilities using IaC and automation. Implement continuous monitoring, validate compliance evidence, deploy into client environments, mentor junior engineers, and contribute documentation and runbooks. The summary above was generated by AI About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients' hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world. But that's not who we are - that's just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference. Why Join Us Under FedRAMP, compliance is no longer a document-it's a set of Key Security Indicators (KSIs): measurable security outcomes validated through automation, continuously. Coalfire organizes its delivery engineering into capability-focused teams, each owning a set of KSI domains such as identity and access management, monitoring and logging, change management, or incident recovery. We're looking for a Cloud Engineer to go deep on a team's domains-building the standard implementation once, making it deployable anywhere, and landing it in client environment after client environment, getting better every time. If you're driven by a desire to innovate, excel at operational excellence, and thrive in a collaborative environment, come be part of a team committed to making the world a safer place. What You'll Do · Design and implement the security capabilities that satisfy FedRAMP's Key Security Indicators (KSIs) within your team's specialty domains. · Build the Security Decision Record (SDR) automation that deploys those capabilities repeatably across many client environments-infrastructure-as-code, pipelines, and configuration baselines, not one-off builds. · Develop automated validation and continuous-monitoring evidence for each capability, so the certified state is provable every day.