AWS Cloud Technical Subject Matter Expert (SME)

Nucorevision, Inc; Norfolk (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Nucorevision, Inc. seeks an elite AWS Cloud Technical SME to serve as the technical authority for multi-account AWS architectures supporting naval defense programs.

This on-site role operates within secure Norfolk facilities (SCIF) to engineer, secure, and troubleshoot advanced cloud environments in air-gapped regions. You will replace high-level theory with hands-on infrastructure engineering, authoring complex automation, resolving critical failures, and standardizing fleet-wide performance

Qualifications

• Active Top Secret/SCI clearance required.
• 8+ years infrastructure engineering experience.
• 4+ years hands-on AWS engineering experience.
• 100% on-site in Norfolk, VA (no hybrid/remote).
• DoD 8570/8140: IAT III or IAM II (e.g., CISSP, CASP+, or CISM).
• AWS Professional or Specialty level certification (e.g., Architect – Professional, DevOps Engineer – Professional, or Advanced Networking).

Responsibilities

• Air-Gapped Infrastructure Engineering: design, build, optimize secure cloud architectures in disconnected, classified regions.
• IaC: author/test production Terraform or CloudFormation scripts for deterministic deployments.
• Telemetry & Dashboard Architecture: deploy monitoring (CloudWatch, Grafana, OpenSearch/ELK) for real-time health and data flows.
• Tier-4 Escalation Engineering: final escalation for routing, IAM cross-account policy conflicts, data synchronization issues.
• Security Hardening: implement DISA STIGs, NIST 800-53, RMF into AMIs and pipelines.
• Stakeholder Advisement: translate telemetry into roadmaps for civilian directors and senior military leadership.

Skills

AWS Cloud

Terraform

CloudFormation

Security Engineering

IaC

Monitoring

DoD 8570/8140

System Administration

Networking

Tools

Terraform

AWS CloudFormation

Job description

PRE-REQUISITES:

• Must be a United States Citizen


• Must reside within 30 miles of Norfolk,VA


• MUST HAVE AN ACTIVE TOP SECRET CLEARANCE


• Must have an AWS Certification


• Must have one of the following certifications: CISSP, CASP+, or CISM


• Must have a minimum of 8 years experience

Position Overview

We are seeking an elite AWS Cloud Technical Subject Matter Expert (SME) to act as the ultimate technical authority for critical, multi-account AWS architectures supporting naval defense programs. Operating 100% on-site from secure facilities in Norfolk, VA, you will engineer, secure, and troubleshoot advanced cloud environments within classified, air-gapped enclaves (AWS Secret and Top Secret Secret Regions / ADC-TS).

This is a deep-dive technical role. You will replace high-level theory with hands‑on infrastructure engineering—authoring complex automation, resolving critical systemic failures, and standardizing fleet‑wide performance monitoring dashboards.

Core Technical Responsibilities

• Air‑Gapped Infrastructure Engineering: Design, build, and optimize secure cloud architectures within completely disconnected and air‑gapped national security regions.


• Infrastructure as Code (IaC): Author, test, and maintain production‑grade Terraform or AWS CloudFormation scripts to ensure deterministic infrastructure deployments across separate classifications.


• Telemetry & Dashboard Architecture: Standardize and deploy enterprise monitoring systems (AWS CloudWatch, Grafana, OpenSearch/ELK stack) to capture real‑time application health, network latency, and cross‑domain data flows.


• Tier‑4 Escalation Engineering: Serve as the final escalation tier for complex routing anomalies, Identity & Access Management (IAM) cross‑account policy conflicts, and data synchronization failures.


• Security Hardening: Implement and automate DISA STIGs, NIST 800-53 controls, and Navy Risk Management Framework (RMF) policies directly into foundational AMIs and deployment pipelines.


• Stakeholder Advisement: Translate complex cloud telemetry data into concise technical roadmaps and actionable readiness briefs for civilian directors and senior military leadership.

Required Qualifications

• Security Clearance: Must hold an active U.S. Government Top Secret / SCI clearance with immediate read‑on eligibility.


• Years of Experience:
  
  
  
  • Minimum 8+ years of infrastructure engineering, systems administration, or high‑level network design experience.
  
  
  • Minimum 4+ years of direct, hands‑on engineering experience designing, configuring, and operating complex workloads inside AWS environments.
  
  
  
  


• Work Location Environment: 100% on-site daily in a physical secure facility (SCIF) in Norfolk, VA. Hybrid and remote options are strictly unavailable due to classification levels.


• DoD 8570/8140 Compliance: Active baseline certification meeting IAT Level III or IAM Level II standards (e.g., CISSP, CASP+, or CISM).


• AWS Credentials: Must hold at least one Professional or Specialty level AWS certification (e.g., AWS Certified Solutions Architect – Professional, DevOps Engineer – Professional, or Advanced Networking Specialty).

Preferred Qualifications

• Naval Fleet Operations Intelligence: Direct experience supporting Navy C4ISR platforms, maritime common operational pictures, or Fleet Forces Command networks.


• Tactical Edge Computing: Practical knowledge of AWS Snowball Edge devices or tactical disconnected nodes operated at sea.


• Container Orchestration: Deep engineering experience with Docker, Kubernetes, or AWS EKS Anywhere inside a multi-tenant classified network.