Cloud Engineer

US132 Guidehouse Digital, LLC; Washington (District of Columbia); On-site; USD 113,000 - 188,000; Full time

Benefits offered by this job

Medical

401(k)

Paid Holidays

Parental Leave

Life Insurance

Tuition Reimbursement

Employee Development

Job summary

Guidehouse seeks a Cloud Engineer to own the MREF cloud platform architecture, infrastructure build, monitoring, and DevSecOps tooling. The role emphasizes near-zero downtime, PaaS optimization, and secure, scalable design across classified and unclassified networks.

Responsibilities include architecture design, IaC automation, and continuous security posture improvements. Requires an active TS clearance and US citizenship; federal environment experience is a plus.

Qualifications

• Eight years of infrastructure or platform engineering experience.
• Four years with Red Hat OpenShift or Kubernetes.
• US Citizenship is required.
• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.

Responsibilities

• Own the MREF cloud platform architecture and IaC implementation.
• Design for near-zero downtime with a 4-hour RTO and RPO; optimize for performance, security, and scalability.
• Develop and maintain the DevSecOps CI/CD pipelines and tooling.
• Maintain monitoring dashboards and secure logging with fast SLA reporting.
• Support STIG assessments and security authorization activities.

Skills

Cloud architecture

DevSecOps

Infrastructure design

Education

Bachelor's degree

Tools

OpenShift

Kubernetes

Job description

Job Family: IT Architecture/Cloud Travel Required: None Clearance Required: Active Top Secret (TS)

What You Will Do:

Supporting a premier law enforcement agency, the Cloud Engineer owns the MREF cloud platform architecture, infrastructure build, monitoring solution, and DevSecOps infrastructure. Designs for near-zero downtime, maximizes use of the clients Cloud Services and clients Enterprise Developer Services, and drives cloud cost reduction.. Maximize virtualization and containerization, emphasizing PaaS over IaaS, and maximizing use of FCS and FEDS managed services. Design, document, test, and implement the MREF Architecture Design Report optimizing for performance, availability, security, scalability, disaster recovery, and real-time or near real-time data integration across classified and unclassified networks. Design to a 4-hour Recovery Time Objective and a 4-hour Recovery Point Objective, propose data replication methods to achieve them, and describe how both will be demonstrated; pursue near-zero downtime for patch and release deployment. Propose and implement the MREF Implementation Plan and the monitoring solution recording SLA compliance in near real time at approximately a 5-minute delay, including the automated dashboard retaining at least 15 months of uptime history; review metrics monthly and deliver a performance optimization plan. Design, document, and implement the DevSecOps solution covering build and CI/CD tooling, with documentation captured in Confluence or an ATS-approved equivalent; periodically reassess the approach against emerging client platform offerings and present findings to government leads. Maintain and update the IaC solution to produce a rapid, flexible, automated build of a consistent, secure, and compliant environment, and identify all dependencies, licenses, and subscription costs. Deliver the detailed as-built system architecture, including network diagrams, NACLs and security groups, IAM policies and roles, OS configurations, logical and data flow diagrams covering low/high transfers, authentication flows, CI/CD pipelines, Splunk logging configuration, and health monitoring. Provide FCS with the specification of required services, architectural specification, and supporting documentation needed for account and resource provisioning. Propose the tagging and labeling strategy and track and project cloud costs; identify, propose, and implement methods to reduce cloud infrastructure cost. Incorporate cloud-native technologies and tools aimed at improving agility, lowering cost, and maximizing automation of system administration tasks. Perform regular and urgent STIG and vulnerability assessments across FIT and MREF, implement remediation per approved POA&M timelines, and provide status and results to the ISSO. Support the ISSO and ISSM in obtaining and maintaining the FIT and MREF ATO, including preparation of security documentation updates and participation in continuous monitoring activities. Ensure the application and infrastructure adhere to and satisfy all existing and future client security requirements, developed and maintained in accordance with policy guides, department policy, and applicable Executive Orders. Abide by licensing agreements and maintain the license tracker report accounting for government-procured licenses, license types, and copies in use across all environments. Maintain and support the cloud infrastructure in sustainment.

What You Will Need:

• EIGHT (8) years of infrastructure or platform engineering experience, including FOUR (4) years with Red Hat OpenShift or Kubernetes and THREE (3) years supporting Federal systems in an accredited environment.
• Bachelor's degree (FOUR (4) additional years of relevant experience may be substituted for formal education).
• US Citizenship is required.
• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance.

What Would Be Nice To Have:

• Red Hat OpenShift architecture, operators, storage classes, and network policy; containerization of enterprise application components.
• Cloud-native PaaS architecture and managed service selection; IaC automation frameworks.
• DevSecOps pipeline design, CI/CD architecture, and artifact management.
• Monitoring and observability design, including SLA instrumentation, Splunk, and uptime dashboarding.
• STIG hardening, vulnerability remediation, and security authorization support.
• Cloud cost management, tagging strategy, and infrastructure cost optimization.
• Red Hat Certified Architect or Certified Specialist in OpenShift Administration; CISSP.

The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

• Medical
• Rx
• Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k)
• Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account
• Health Care & Dependent Care
• Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement
• Personal Development
• Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus

About Guidehouse

Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at [e-mail].

All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or [e-mail]. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse.

Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline.

If you want to check the validity of correspondence you have received, please contact [e-mail].

Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. With an integrated business technology approach, Guidehouse drives efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets. Built to help clients across industries outwit complexity, the firm brings together approximately 18,000 professionals to achieve lasting impact and shape a meaningful future.

guidehouse.com