Cloud Engineer

Endurion; Tampa (FL); On-site; USD 95,000 - 140,000; Full time

Job summary

Endurion is seeking a Cloud Engineer to design, deploy, and maintain GovCloud-based cloud environments across AWS and Azure, ensuring high availability, security, and compliance with DoD frameworks.

The role focuses on IAM/RBAC, network optimization, IaC tooling like Terraform/CloudFormation/ARM templates, and supporting ATO processes to document security controls.

Qualifications

• Designing, deploying, and maintaining secure cloud environments in AWS and Azure.
• Experience with IAM, RBAC, and Zero Trust concepts.

Responsibilities

• Design, deploy, and maintain GovCloud-based AWS/Azure environments with security and scalability in mind.
• Configure IAM, RBAC, and security groups; manage networking (VPC, VPNs, peering).
• Support ATO processes and prepare security documentation.

Skills

Cloud architecture

Security best practices

IAM/RBAC

Zero Trust Architecture

Terraform

Cloud networking

Automation

DoD compliance

Education

Bachelor's degree in Computer Science or related field

AWS Certified Solutions Architect – Associate

Microsoft Certified: Azure Solutions Architect Expert

Google Professional Cloud Architect

Tools

Terraform

CloudFormation

ARM templates

Azure/AWS management

Job description

The Cloud Engineer supports mission-critical objectives under the referenced work order by designing, deploying, and maintaining GovCloud-based infrastructures across AWS and Azure ensuring high availability, scalability, and security for mission-critical applications. This role manages Azure and AWS infrastructure, optimizes performance, implements networking configurations, and integrates security monitoring tools.

This future opportunity is contingent upon award.

Job Description

• The Cloud Engineer is responsible for designing, deploying, and maintaining secure cloud environments in AWS and Azure ensuring compliance with DoD cloud security frameworks.
• The position requires configuring identity and access management (IAM) solutions, enforcing RBAC, and managing cloud security groups and firewalls.
• Engineers will optimize cloud networking configurations including VPC peering, VPNs, and cross-domain connectivity.
• The role includes supporting ATO processes including preparing SSP, SAR, and POA&M.

Required Qualifications and Experience

The contractor shall provide personnel who meet one of the following requirements:

• Bachelor's degree in Computer Science, Information Systems, or a related field; or
• A minimum of five (5) years of professional experience in cloud engineering.

Candidates must have demonstrated experience in the following areas:

• Designing, deploying, and managing AWS and Azure cloud environments with a focus on security, automation, and scalability.
• Identity and Access Management (IAM), role-based access control (RBAC), and Zero Trust Architecture (ZTA).
• Cloud networking configurations such as VPC peering, subnets, VPNs, and security groups.
• Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or ARM templates.
• Supporting Authority to Operate (ATO) processes including preparing security documentation.

Required Skills and Competencies

• Expertise in cloud architecture, networking, virtualization, containerization, and security best practices.
• Working knowledge of IAM, RBAC, Zero Trust Architecture, and cloud networking configurations.
• Proficiency in Terraform, CloudFormation, ARM templates, and hybrid/multi-cloud configurations.
• Strong understanding of DoD governance frameworks and NIST requirements.
• Ability to optimize cloud resources for compute, storage, and networking efficiency.

Education

• Bachelor's degree in a relevant field, or an equivalent combination of education and experience.
• AWS Certified Solutions Architect – Associate (Preferred, Not Required)
• Microsoft Certified: Azure Solutions Architect Expert (Preferred, Not Required)
• Google Professional Cloud Architect (Preferred, Not Required)

Clearance Requirement

No clearance required for off-site duty location, or the ability to obtain and maintain the required clearance as specified by the program