Cloud Engineer

Leidos; Reston (VA); Hybrid; USD 92,000 - 167,000; Full time

Job summary

Leidos in Reston, Virginia, seeks a senior Cloud Engineer to design and implement secure cloud architectures across unclassified and classified enclaves. You will automate infrastructure, manage IAM, and support Kubernetes workloads in a hybrid environment.

Ideal candidates have TS/SCI clearance and strong experience with AWS/Azure, Terraform, and CI/CD. The role emphasizes DoD RMF, NIST, and CIS/STIG compliance, plus ongoing security validation.

Qualifications

• TS/SCI clearance required.
• US citizenship required.
• 8–12 years of relevant experience for BS, or 6–10 years with Masters; may include a Doctorate.
• Experience designing or operating within AWS GovCloud (US) or Azure.
• Strong Terraform or CloudFormation experience and CI/CD expertise.
• Experience with IAM, MFA, and secure key management.

Responsibilities

• Architect, design, and deploy secure, scalable cloud solutions for unclassified and classified environments.
• Enable secure hybrid connectivity and data replication across enclaves.
• Maintain IaC using Terraform or CloudFormation and manage cloud networking.
• Support Kubernetes deployments, monitoring, and incident response.
• Ensure DoD RMF, NIST, and CIS/STIG compliance across environments.

Skills

AWS

Azure

Terraform

CloudFormation

Kubernetes

GitLab

Python

Windows Server

Active Directory

RMF/NIST

Education

BS degree

Masters degree

Doctorate

Tools

Terraform

CloudFormation

GitLab

Kubernetes

AWS GovCloud

Azure

ExpressRoute

VPC

KMS

Job description

Description

The Leidos Intelligence Group has an opening for senior Cloud Engineer in Reston, Virginia. The successful candidate will work as a member of a government contractor team managing and securing mission critical infrastructure. You will work in a hybrid environment, bridging the gap between unclassified and classified enclaves, while ensuring compliance with federal mandates. You will act as a key technical resource, driving automation, cloud-native modernization, and secure operations across isolated cloud boundaries. Work will be performed in a fast-paced, high-energy environment inside a government facility.

Primary Responsibility

Cloud Architecture & Engineering:

• Architect, design, and deploy secure, scalable, and highly available solutions (AWS GovCloud, Azure, etc) tailored for unclassified and classified environments.
• Ensure seamless hybrid connectivity and secure data replication between unclassified and classified networks/enclaves.
• Provision and maintain Infrastructure as Code (IaC) using tools such as Terraform or AWS CloudFormation.
• Configure and troubleshoot VPCs/VNets, subnets, routing, security groups, network ACLs, load balancers, DNS, firewalls, VPNs, AWS Transit Gateway, Direct Connect, and Azure ExpressRoute.
• Implement secure network segmentation, private connectivity, traffic inspection, and connectivity between cloud, on-premises, and classified environments.
• Deploy, manage, and troubleshoot containerized workloads and Kubernetes platforms such as Amazon EKS or Azure Kubernetes Service (AKS).

Security & Compliance:

• Implement strict security controls to align with DoD RMF, NIST SP 800-53, and CIS/STIG hardening guidelines across all on-premises and cloud resources.
• Manage Identity and Access Management (IAM), multi-factor authentication (MFA), and secure key management.
• Audit and validate air-gapped or classified cloud environments to ensure they strictly adhere to federal data-at-rest and data-in-transit encryption standards.
• Manage network policies, container image scans, and access logs.
• Implement encryption, private networking, logging, monitoring, and data-protection controls for Amazon workloads in regulated environments.

Operations & Deployment

• Maintain CI/CD pipelines (e.g., GitLab, GitHub Actions) for smooth, automated, and audited deployments.
• Monitor cloud system performance, availability, and reliability, proactively resolving infrastructure defects and bottlenecks.
• Troubleshoot complex, interconnected cloud stacks, performing root-cause analysis when operational issues occur.
• Support Kubernetes deployments, scaling, upgrades, patching, logging, monitoring, and application troubleshooting.

On-Premises & Air-Gapped Environment Support:

• Administer and support on-premises users, servers, virtual machines, storage, and core infrastructure operating within secure air-gapped environments.
• Manage user accounts, permissions, authentication, group policies, and access controls across Windows and Linux systems.
• Perform system provisioning, patching, configuration management, vulnerability remediation, backups, and recovery using approved offline processes.
• Troubleshoot server, application, identity, storage, and connectivity issues while maintaining strict classified-environment security and change-control requirements.
• Support secure transfer, validation, and deployment of software packages, updates, container images, and configuration artifacts into disconnected environments.

Qualifications

• TS/SCI Clearance is required to be considered
• Must be a US Citizen
• BS degree and 8 – 12 years of prior relevant experience or Masters with 6 – 10 years of prior relevant experience. May possess a Doctorate in technical domain. A with a minimum of 3+ years of hands-on, production-level AWS cloud engineering experience.
• Demonstrated ability designing or operating within Azure or AWS GovCloud (US) regions.
• Experience with AWS Core services (EC2, S3, VPC, RDS, Route53, IAM, CloudWatch, KMS.)
• Experience supporting users, servers, authentication services, and infrastructure within secure on-premises and air-gapped environments.
• Experience with Terraform or CloudFormation.
• Experience implementing CI/CD pipelines using tools such as GitLab.
• Experience administering Windows Server and Active Directory Domain Services, including users, groups, Group Policy, DNS, DHCP, domain controllers, trusts, and certificate services.
• Experience troubleshooting complex infrastructure issues and performing root-cause analysis across cloud, network, operating system, identity, and application layers.
• Ability to create and maintain technical documentation, operating procedures, and security implementation evidence.
• Experience in OS and Scripting with Python.
• Understanding of DoD Cloud Computing Security Requirements Guide (SRG), RMF, and NIST frameworks.

Preferred Qualifications

• AWS Certified Solutions Architect (Associate or Professional), AWS Certified DevOps Engineer, or DoD 8570/8140 compliance (e.g., CompTIA Security+).

#ASBA

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range:

Pay Range $92,300.00 - $166,850.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.