Cloud Engineer

Leidos; Lorton (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Cloud Engineer to deploy, maintain, and scale hybrid cloud infrastructure for Air Force programs. You will work on Azure-based solutions with IaC, DevSecOps practices, and Everything-as-Code, supporting 24x7 monitoring and on-call escalation.

The role requires on-site work, with primary location in Omaha, NE, and consideration for candidates near Lorton, VA or in Oklahoma City, OK. A strong security posture and cloud proficiency are essential.

Qualifications

• Active Top Secret clearance or ability to obtain SCI.
• Bachelor’s degree with 4+ years of experience or Master’s with 2+ years.
• DoD 8140 Intermediate certification (Security+ CE or equivalent).
• Azure AZ-104 or equivalent cloud certification.
• Experience with IaC: Terraform, Ansible, CloudFormation.
• Experience with VMware/Hyper-V/OpenStack and multiple public clouds.

Responsibilities

• Design, deploy, and manage hybrid Azure cloud infrastructures (IaaS & PaaS).
• Automate deployments and configurations with IaC and IaC tools (Terraform, Ansible, ARM/BICEP).
• Provision, maintain, and scale cloud resources in Azure with cross-functional teams.
• Monitor resource usage for cost efficiency and scalability.
• Troubleshoot issues and perform root-cause analysis as needed.
• Ensure security and compliance within a DevSecOps framework.
• Support CI/CD pipelines and integrate infrastructure automation into development.
• Implement and manage Docker containers and Kubernetes orchestration.

Skills

Security clearance

DevSecOps

Fast learner

Team collaboration

Education

Bachelor's degree

Master's degree

Tools

Terraform

Ansible

ARM/BICEP

Docker

Kubernetes

VMware

Hyper-V

OpenStack

Azure

AWS

GCP

CloudFormation

Job description

Description

The Defense Sector at Leidos is looking for a Cloud Engineer to support multiple fast-paced programs across the Air Force. The Cloud Engineer will deploy, maintain, and scale hybrid cloud digital infrastructure for multiple Air Force customers. This position requires a fast-learning, high-performing candidate with a proven history of delivering cloud solutions to customers. The ideal candidate will have experience in deploying and maintaining cloud infrastructure in Microsoft Azure cloud using DevSecOps practices and an Everything-as-Code approach. This position offers a valuable opportunity to further develop your career in cloud engineering within an Air Force program, contributing to the secure and efficient delivery of service in a challenging and innovative environment. You will be a member of a team providing 24x7 monitoring and management of customer networks and will be on-call in the event of off-hours emergencies.

This position does require on-site work, and the primary location is in Omaha, NE. Candidates located near Lorton, VA and also Oklahoma City, OK will also be considered.

Primary Responsibilities:

• Design, deploy, and manage virtual cloud infrastructures across hybrid environments in Microsoft Azure Cloud (IaaS & PaaS).
• Automate deployments and configurations using Infrastructure-as-Code (IaC) and Configuration-as-Code tools such as Terraform, Ansible, and ARM/BICEP templates.
• Provision, maintain, and scale cloud resources in Microsoft Azure in collaboration with cross-functional teams.
• Monitor cloud resource utilization to ensure cost efficiency and scalability.
• Troubleshoot and resolve system, application, and infrastructure issues, performing root cause analysis as needed.
• Ensure infrastructure meets security, compliance, and operational standards within a DevSecOps framework.
• Support CI/CD pipelines and integrate infrastructure automation into the development lifecycle.
• Implement and manage containerization and orchestration technologies, such as Docker and Kubernetes, for microservices architectures.
• Configure and maintain monitoring tools to ensure system and application availability and performance.
• Identify and implement optimizations to improve efficiency, reduce latency, and enhance system uptime.
• Apply security best practices, including identity and access management (IAM), network segmentation, and encryption, to protect hybrid cloud infrastructures.
• Assist in audits and compliance initiatives (e.g., RMF, NIST, ISO 27001).
• Provide Tier-2/3 support for escalated issues, working closely with internal teams and external vendors.
• Document procedures, configurations, and troubleshooting steps to enhance knowledge sharing.

Basic Qualifications:

• US Citizen with at least an active Top Secret security clearance and the ability to obtain a SCI prior to your start date.
• Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience. Additional years of experience will be accepted in lieu of a degree.
• Must have a DoD 8140 Intermediate certification (Security+ CE or equivalent) (formerly DoD-8570 IAT Level 2 baseline certification).
• Intermediate Azure Certifications such as AZ-104: Azure Administrator Associate or similar certifications from other Cloud Service Providers.
• Proficiency in virtualization technologies, including VMware, Hyper‑V, and OpenStack.
• Proficiency in public cloud platforms such as AWS, Azure, Google Cloud (GCP), and Oracle Cloud Infrastructure (OCI).
• Hands‑on experience with Infrastructure-as-Code (IaC) tools like Terraform, Ansible, and CloudFormation.
• Solid understanding of containerization (Docker) and orchestration platforms (Kubernetes).
• Familiarity with monitoring tools (Prometheus, Grafana, etc.) and incident management.
• Solid Understanding of networking concepts, including VPCs, subnets, VPNs, and firewalls.
• Practical knowledge of DevSecOps principles, methodologies, and best practices.
• Interest in continuous learning and professional development in cybersecurity and DevOps practices.

Preferred Qualifications:

• Experience with Air Force programs.
• Experience with security tools and practices related to DevSecOps (e.g., SAST, DAST, IAST).
• Experience with compliance standards (e.g., OWASP, NIST) and DoD regulations.
• Expert cloud certifications such as Microsoft Certified: Azure Solutions Architect Expert or similar certification from another cloud provider.
• Experience with Azure Stack Edge family of devices.
• Experience with DoD networks, especially classified and operational networks.
• Understanding of enterprise networking concepts, especially Virtual Private Networks (VPNs), tunneling, QoS, and cloud connectivity solutions (e.g. Azure Express Route).
• Experience with Infrastructure as Code (IaC) and security automation.

DABAOPP1

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos:

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits:

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data:

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination:

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.