Cloud Engineer - Secret Clearance | GovCloud & IaC

System One; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Part time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One is seeking a Cloud Engineer with a Secret clearance for a contract role in the Washington, DC area. The position is hybrid, requiring on-site presence at the Pentagon two days per week and remote work the remaining days.

The ideal candidate will design and implement AWS GovCloud solutions, manage landing zones with Terraform, and run a DevSecOps pipeline with extensive IAM, SCPs, KMS, and network configurations. DoD cloud experience and DoD certifications are essential.

Qualifications

• AWS architecture and security in cloud environments.
• Terraform IaC for landing zones and governance.
• DoD cloud experience and security certification requirements.

Responsibilities

• Onsite @ Pentagon 2-days/week, clearance: Secret
• Build Landing Zone including AWS Organizations, SCPs, account vending, KMS, monitoring stack, and IaC
• Develop and maintain DevSecOps pipeline
• Design and implement AWS GovCloud solutions
• Proficiency with Terraform, including module design and remote state management
• Design AWS Organizations and SCPs
• Configure IAM Identity Center
• Manage AWS networking components (TGW, VPC)
• Design KMS CMK
• Use AWS security services (GuardDuty, Security Hub, CloudTrail, Inspector, Config)
• Use GitLab CI/CD for automation
• Implement OPA/Sentinel policy-as-code
• Utilize Python and Bash scripting
• Familiarity with DISA Cloud Computing SRG

Skills

Cloud security

DevSecOps practices

Scripting (Python, Bash)

Education

AWS SAA certification

AWS SAP certification

AWS Security Specialty

HashiCorp Terraform Associate

DoD 8570/8140 IAT II

SCCA-compliant design experience

Tools

Terraform

GitLab CI/CD

Job description

System One is seeking a Cloud Engineer with a Secret clearance for a contract role in the Washington, DC area. The position is hybrid, requiring on-site presence at the Pentagon two days per week and remote work the remaining days.

The ideal candidate will design and implement AWS GovCloud solutions, manage landing zones with Terraform, and run a DevSecOps pipeline with extensive IAM, SCPs, KMS, and network configurations. DoD cloud experience and DoD certifications are essential.