Cloud Engineer – Journeyman

asmexternalcareersite; San Antonio (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

ASM Research is seeking a Cloud Engineer - Journeyman to design and implement secure, scalable multi-cloud and hybrid cloud infrastructures for government workloads. You will build IaC using Terraform, CloudFormation, and ARM templates, and integrate CI/CD with cloud platforms, focusing on security, governance, and observability.

You will collaborate with security, networking, and application teams to modernize legacy workloads, optimize costs, and ensure disaster recovery readiness across

Qualifications

• Bachelor’s degree in IT or related field; equivalent experience may be considered.
• Approximately 4–7 years of hands-on cloud engineering, automation, and security experience in enterprise or government environments.
• Experience implementing IaC with Terraform, CloudFormation, or ARM templates and supporting automated deployment pipelines.
• Experience configuring cloud networking, IAM, and security controls in at least one major cloud provider.
• Experience implementing and operating cloud monitoring and logging solutions and supporting incident response.
• Must hold an active Secret clearance and be a US citizen.

Responsibilities

• Design and implement multi-cloud and hybrid cloud architectures with emphasis on security and cost efficiency.
• Build and maintain IaC solutions using Terraform, CloudFormation, ARM templates, and automation pipelines.
• Engineer cloud networking constructs and secure connectivity integrated with on-premises networks.
• Configure and manage cloud security services and governance controls.
• Implement cloud monitoring, logging, and observability solutions for incident response.
• Optimize resource utilization with right-sizing and cost-aware strategies.
• Design and test disaster recovery and business continuity strategies for cloud workloads.
• Support DevOps by integrating CI/CD pipelines with cloud platforms and container tools.

Skills

Cloud engineering

Automation

Security compliance

IaC

Govt environments

CI/CD practices

Multi-cloud

Networking

Education

Bachelor's degree

4–7 years experience

Tools

Terraform

CloudFormation

ARM templates

Docker

Kubernetes

CI/CD pipelines

Job description

The Cloud Engineer - Journeyman designs, engineers, and integrates secure, scalable multi-cloud and hybrid cloud infrastructures that underpin mission-critical enterprise systems in highly regulated government environments. The role focuses on implementing Infrastructure as Code, cloud automation, and governance controls to standardize provisioning, enforce guardrails, and maintain compliant operations across major public cloud platforms. The engineer collaborates with security, networking, and application teams to modernize legacy workloads, improve observability and disaster recovery, and document architectures and operational patterns for ongoing support.

Key Responsibilities

• Design and implement multi-cloud and hybrid cloud architectures across major public cloud platforms to support enterprise workloads with strong emphasis on security, reliability, and cost efficiency.

• Build and maintain Infrastructure as Code (IaC) solutions using tools such as Terraform, CloudFormation, ARM templates, and automation pipelines to standardize and automate cloud resource provisioning.

• Engineer cloud networking constructs including virtual networks/VPCs, subnets, routing, peering, and secure connectivity (VPN, Direct Connect, ExpressRoute) integrated with on-premises enterprise networks.

• Configure and manage cloud security services and controls such as IAM, security groups, key management, configuration monitoring, and threat detection to align with government security and cloud governance requirements.

• Implement cloud monitoring, logging, and observability solutions (e.g., CloudWatch, Azure Monitor, Stackdriver, Elastic, Splunk) to provide operational visibility, detect anomalies, and support incident response activities.

• Optimize cloud resource utilization through rightsizing, scaling policies, use of reserved and spot instances, and performance tuning to manage spend while meeting service level objectives.

• Design and test disaster recovery and business continuity strategies for cloud workloads, including backup, replication, multi-region architectures, and documented recovery playbooks for mission-critical systems.

• Support DevOps practices by integrating CI/CD pipelines with cloud platforms, container orchestration tools, and configuration management solutions to streamline deployments and reduce operational risk.

Required Qualifications

• Bachelor’s degree in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field; equivalent experience may be considered.

• Approximately 4-7 years of hands-on experience in cloud engineering, automation, and security within enterprise or government environments, including multi-cloud or hybrid architectures.

• Experience implementing Infrastructure as Code using tools such as Terraform, CloudFormation, or ARM templates and supporting automated deployment pipelines.

• Demonstrated experience configuring and managing cloud networking, identity and access management, and security controls in at least one major public cloud provider.

• Experience implementing and operating cloud monitoring and logging solutions and supporting incident response in production environments.

• Must hold an active Secret clearance and meet applicable DoD 8140 requirements.

• Must be a US Citizen.

Preferred Qualifications

• AWS Certified Solutions Architect or AWS Certified DevOps Engineer.

• Microsoft Azure Solutions Architect Expert or Azure Administrator Associate certification.

• Experience with containerization and orchestration technologies such as Docker and Kubernetes in production cloud environments.

• Experience working in federal or other highly regulated enterprise IT environments with formal cloud governance frameworks.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.