Cloud Engineer - Secret Clearance Required

System One, Inc.; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental plan

Vision plan

Life insurance

401(k)

Job summary

System One, Inc. is seeking a Cloud Engineer with Secret clearance for a hybrid role onsite at the Pentagon and remote work options. You will design and implement secure AWS environments, IaC pipelines, and Networking, focusing on GovCloud and SCPs.

Responsibilities include building landing zones, configuring IAM, KMS CMK, GuardDuty, and DevSecOps pipelines using GitLab CI/CD. DoD cloud experience is required.

Qualifications

• AWS SAA certification required; AWS SAP preferred.

Responsibilities

• Onsite @ Pentagon 2-days/week, clearance: Secret.

Skills

AWS

Terraform

GitLab CI/CD

Python

Bash

OPA/Sentinel

DISA SRG

Education

AWS SAA

AWS Security Specialty

HashiCorp Terraform Associate

DoD 8570/8140 IAT II

Tools

AWS GovCloud

AWS Organizations

KMS

SCPs

VPC

Transit Gateway

IAM Identity Center

Terraform Modules

GitLab

Job description

Job Title: Cloud Engineer - Secret Clearance Required
Location: Arlington, VA, Washington DC
Type: Contract
Work Model: Hybrid – onsite and remote
Security Clearance: Secret

Responsibilities

• Onsite @ Pentagon 2-days/week, clearance: Secret
• Build Landing Zone including AWS Organizations, SCPs, account vending, KMS, monitoring stack, and Infrastructure as Code (IaC)
• Develop and maintain DevSecOps pipeline
• Design and implement AWS GovCloud solutions (specifically AWS GovCloud, noting that commercial AWS is not the same)
• Proficiency with Terraform, including module design and remote state management
• Design AWS Organizations and Service Control Policies (SCPs)
• Configure IAM Identity Center
• Manage AWS networking components such as Transit Gateway (TGW), VPC, VDSS/VDMS
• Design Key Management Service (KMS) Customer Master Key (CMK)
• Employ AWS security services including GuardDuty, Security Hub, CloudTrail, Inspector, Config
• Use GitLab CI/CD for automation
• Implement OPA/Sentinel policy-as-code
• Utilize Python and Bash scripting
• Demonstrate familiarity with DISA Cloud Computing SRG

Requirements

• AWS SAA certification minimum (AWS SAP preferred)
• AWS Security Specialty certification strongly preferred
• HashiCorp Terraform Associate
• DoD 8570/8140 IAT II certification
• Federal experience with DoD cloud environments essential
• SCCA-compliant design experience strongly preferred

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-
#LI-
Ref: #404-IT Pittsburgh