Cloud Engineer (onsite)

System One; Washington (District of Columbia); On-site; USD 110,000 - 180,000; Full time

Job summary

System One seeks a Cloud Engineer in Washington, DC, 100% onsite, to support the Enterprise Data Platform (EDP). You will partner with senior engineers to provision, monitor, and secure cloud infrastructure on AWS GovCloud, enabling data, analytics, and AI/ML workloads.

The role emphasizes hands-on cloud engineering, IaC with Terraform/CloudFormation, and collaboration across security and application teams. A foundational cloud background and strong problem-solving mindset are essential.

Qualifications

• Working knowledge of core AWS services and concepts (VPC, EC2, S3, IAM, EKS)
• Familiarity with IaC concepts and CloudFormation
• Source control experience (GitLab/GitHub/Bitbucket)
• familiarity with CI/CD concepts and tooling
• Monitoring with CloudWatch/CloudTrail
• Troubleshoot issues and analyze logs
• Bachelor’s degree or equivalent experience

Responsibilities

• Provision, configure, and maintain AWS infrastructure for EDP environments.
• Develop and maintain Infrastructure as Code using Terraform.
• Support CI/CD pipelines for infrastructure deployments.
• Maintain infrastructure code in Git repositories (GitLab preferred).
• Assist with VPCs, subnets, routing, and security groups.
• Support EKS-based workloads and troubleshooting.
• Document configurations, procedures, and troubleshooting steps.

Skills

AWS cloud services

Terraform

CI/CD concepts

Git version control

Troubleshooting

Documentation

Willingness to learn

Education

Bachelor's degree or equivalent

Tools

GitLab

GitHub

Bitbucket

CloudFormation

Terraform

Job description

Cloud Engineer

Washington, DC – 100% Onsite

Per Federal contract U.S. Citizenship or Green Card is Required

Must be able to pass enhanced background screen (criminal, financial, drug) for Public Trust clearance

W-2 or C2C

Application Deadline: 8/28/2026 at 12pm

PROJECT DESCRIPTION

The Enterprise Data Platform (EDP) empowers the Board to confidently use trusted, standardized, and well governed data to drive insight and innovation.

BACKGROUND

The Cloud Engineer is a hands-on technical resource responsible for supporting the implementation, operation, and continuous improvement of the Enterprise Data Platform (EDP).

EDP is hosted on AWS GovCloud and provides secure, scalable cloud infrastructure supporting enterprise data, analytics, and AI/ML workloads.

This role will work closely with senior platform engineers, cloud infrastructure, security, and application teams to provision and maintain cloud infrastructure, automate repeatable platform operations, monitor platform health, troubleshoot issues, and support secure delivery of EDP capabilities. The position is intended for a candidate with foundational cloud engineering skills who demonstrates strong technical aptitude, problem-solving ability, and a willingness to learn and expand their cloud engineering expertise on the job.

REQUIREMENTS

• Working knowledge of core AWS services and concepts, including VPC, EC2, S3, IAM, EKS, CloudWatch, CloudTrail, and AWS Systems Manager Parameter Store.
• Foundational understanding of AWS networking concepts, including VPCs, subnets, routing, security groups, and connectivity between cloud resources.
• Familiarity with AWS Identity and Access Management (IAM), including roles, policies, permissions, and least-privilege access concepts.
• Knowledge of Infrastructure as Code (IaC) concepts and experience or familiarity with AWS CloudFormation.
• Experience using source/version control systems such as GitLab, GitHub, or Bitbucket, with GitLab preferred.
• Familiarity with CI/CD concepts and tooling, including automated build, test, deployment, and environment promotion processes.
• Familiarity with cloud monitoring and logging concepts using services such as CloudWatch and CloudTrail.
• Ability to troubleshoot technical issues, analyze logs and system behavior, and work collaboratively with other engineering teams to resolve problems.
• Ability to learn new cloud technologies, tools, and engineering practices and apply them under guidance from senior engineers.
• Strong written and verbal communication skills and ability to document technical configurations, procedures, and troubleshooting steps.
• Bachelor’s degree in a related field or equivalent practical experience.

Highly valued (Desirable, but not required) knowledge, skills and experience

• Basic understanding of containerization and container orchestration concepts; familiarity with Amazon EKS/Kubernetes is preferred.
• Basic understanding of cloud security practices, including secrets/configuration management, secure access, logging, and encryption.
• Hands-on experience provisioning AWS infrastructure using CloudFormation or another Infrastructure as Code technology.
• Experience developing or maintaining CI/CD pipelines, preferably using GitLab CI/CD.
• Familiarity with Terraform or other infrastructure automation frameworks.
• Familiarity with Kubernetes concepts and Amazon EKS administration.
• AWS Certified Solutions Architect Associate or Professional

The Contractor shall deliver, but not limited to, the following

• Provision, configure, and maintain AWS infrastructure components supporting EDP environments, including networking, compute, storage, identity and access management, and logging/monitoring services.
• Develop and maintain Infrastructure as Code using Terraform and other approved automation tools to enable repeatable and consistent infrastructure deployments.
• Support CI/CD pipelines used to deploy infrastructure and platform configurations across development, testing, and production environments.
• Maintain source-controlled infrastructure code and configuration using Git-based repositories, preferably GitLab.
• Assist with configuration and administration of AWS networking components including VPCs, subnets, route tables, security groups, and related connectivity.
• Support cloud infrastructure associated with containerized workloads running on Amazon EKS, including basic troubleshooting and operational support.
• Configure and maintain platform monitoring, alerting, dashboards, and health checks using AWS monitoring and logging capabilities.
• Monitor and analyze CloudWatch logs, metrics, and alarms and CloudTrail events to identify operational or security issues.
• Assist with implementing standardized secure cloud configurations aligned with organizational security requirements and engineering standards.
• Troubleshoot infrastructure, deployment, connectivity, permissions, and platform issues in coordination with senior engineers and other technical teams.
• Assist with cloud infrastructure upgrades, configuration changes, feature deployments, and environment maintenance activities.
• Support implementation and maintenance of audit logging and operational visibility required for security reviews and compliance activities.
• Assist with secure cloud connectivity patterns, including private connectivity, service endpoints, egress controls, and integration with enterprise network services.
• Build and maintain development, sandbox, and proof-of-concept cloud environments using repeatable infrastructure configurations.
• Support cost management activities by identifying unused or underutilized AWS resources and assisting with implementation of cost-control measures.
• Assist with automation of routine platform administration and operational activities using Infrastructure as Code, scripting, APIs, and command-line tools.
• Maintain technical documentation including infrastructure configurations, deployment procedures, operational runbooks, troubleshooting guides, and architecture diagrams.
• Support integrations between AWS infrastructure and enterprise data, analytics, security, and monitoring platforms.
• Participate in incident troubleshooting, root-cause analysis, and implementation of corrective actions.
• Participate in platform capacity planning, infrastructure scaling, and performance monitoring activities.
• Support onboarding of new applications, development teams, and platform users by provisioning required infrastructure, permissions, and environment configurations.
• Work with senior engineers to continuously improve platform automation, reliability, security, and operational processes

PLACE OF PERFORMANCE

On-site at FRB locations, Washington, DC. This position requires 100% onsite. Hybrid or remote candidates will not be considered for this position.

CITIZEN STATUS

US Citizenship or Green Card required.

INTERVIEW

Selected candidates will participate in a phone screening. Those that pass the phone screening will be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines.