Cloud Engineer - Secret Clearance Required

System One; Washington (District of Columbia); Hybrid; USD 120,000 - 160,000; Part time

Benefits offered by this job

Health and welfare benefits

401(k) plan

Job summary

System One is seeking a Cloud Engineer with a Secret clearance for a contract role in the Washington, DC area. The position is hybrid, requiring on-site presence at the Pentagon two days per week and remote work the remaining days.

The ideal candidate will design and implement AWS GovCloud solutions, manage landing zones with Terraform, and run a DevSecOps pipeline with extensive IAM, SCPs, KMS, and network configurations. DoD cloud experience and DoD certifications are essential.

Qualifications

• AWS architecture and security in cloud environments.
• Terraform IaC for landing zones and governance.
• DoD cloud experience and security certification requirements.

Responsibilities

• Onsite @ Pentagon 2-days/week, clearance: Secret
• Build Landing Zone including AWS Organizations, SCPs, account vending, KMS, monitoring stack, and IaC
• Develop and maintain DevSecOps pipeline
• Design and implement AWS GovCloud solutions
• Proficiency with Terraform, including module design and remote state management
• Design AWS Organizations and SCPs
• Configure IAM Identity Center
• Manage AWS networking components (TGW, VPC)
• Design KMS CMK
• Use AWS security services (GuardDuty, Security Hub, CloudTrail, Inspector, Config)
• Use GitLab CI/CD for automation
• Implement OPA/Sentinel policy-as-code
• Utilize Python and Bash scripting
• Familiarity with DISA Cloud Computing SRG

Skills

Cloud security

DevSecOps practices

Scripting (Python, Bash)

Education

AWS SAA certification

AWS SAP certification

AWS Security Specialty

HashiCorp Terraform Associate

DoD 8570/8140 IAT II

SCCA-compliant design experience

Tools

Terraform

GitLab CI/CD

Job description

Job Title: Cloud Engineer - Secret Clearance Required
Location: Arlington, VA, Washington DC
Type: Contract
Work Model: Hybrid - onsite and remote
Security Clearance: Secret

Responsibilities

• Onsite @ Pentagon 2-days/week, clearance: Secret
• Build Landing Zone including AWS Organizations, SCPs, account vending, KMS, monitoring stack, and Infrastructure as Code (IaC)
• Develop and maintain DevSecOps pipeline
• Design and implement AWS GovCloud solutions (specifically AWS GovCloud, noting that commercial AWS is not the same)
• Proficiency with Terraform, including module design and remote state management
• Design AWS Organizations and Service Control Policies (SCPs)
• Configure IAM Identity Center
• Manage AWS networking components such as Transit Gateway (TGW), VPC, VDSS/VDMS
• Design Key Management Service (KMS) Customer Master Key (CMK)
• Employ AWS security services including GuardDuty, Security Hub, CloudTrail, Inspector, Config
• Use GitLab CI/CD for automation
• Implement OPA/Sentinel policy-as-code
• Utilize Python and Bash scripting
• Demonstrate familiarity with DISA Cloud Computing SRG

Requirements

• AWS SAA certification minimum (AWS SAP preferred)
• AWS Security Specialty certification strongly preferred
• HashiCorp Terraform Associate
• DoD 8570/8140 IAT II certification
• Federal experience with DoD cloud environments essential
• SCCA-compliant design experience strongly preferred

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

Benefits

• eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.