Cloud Engineer – Senior

Bravura, Inc.; Quantico (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Bravura, Inc. is seeking a Senior Cloud Engineer to lead the design and implementation of secure cloud solutions for DoD workloads in a sensitive IL2 environment at Quantico, VA.

This role emphasizes cloud strategy, architecture, and compliance across development, security, and operations to ensure mission-critical systems remain scalable and resilient. You will work with Microsoft Azure, implement DISA STIGs, manage identity with Entra, monitor performance with Azure Monitor, and produce

Qualifications

• 7+ years of experience in cloud engineering or related field.
• Masters or PhD in IT, Cybersecurity, CS, Info Sys, Data Science, or SW Engineering.
• Active Secret clearance (or higher) required; DoD environment experience preferred.

Responsibilities

• Analyze user needs and SW requirements to determine feasible design within time and cost constraints.
• Design and implement cloud computing solutions and cloud security architecture.
• Develop enterprise architecture and system components to meet user needs.
• Provide cloud engineering support including Azure infrastructure deployment, governance, and cost optimization.
• Create and maintain architecture documentation, SOPs, and workflow diagrams.

Skills

Cloud architecture and design

Security best practices

Cloud strategy & adoption

Stakeholder communication

Education

Master's or PhD in IT, Cybersecurity, CS, Info Sys, Data Science, or SW Engineering

Tools

Microsoft Azure

Azure AD/Entra

Azure Monitor & Log Analytics

Azure Defender for Cloud

Job description

Role: Cloud Engineer - Senior

Location: Quantico, VA

Education: Masters or PHD (IT, Cybersecurity, Computer Science, Info. Sys, Data Science, or SW Engineering)

Training: TBD (pending DoD validation)

Certifications: TBD (pending DoD validation)

Years of Experience: 7+ years; experience may be considered as alternative to foundational qualifications.

Clearance Level & Investigation: Secret

Job Description:

The Cloud Engineer – Senior manages & identifies program high-level technical specifications, which may include application design, cloud computing strategy & adoption, & integration of SW applications into a functioning system to meet requirements. This includes, but is not limited to:

• Core Tasks:
  • Analyze user needs & SW requirements to determine feasibility of design within time & cost constraints.
  • Consult with engineering staff to evaluate interface between HW & SW.
  • Consult with customers about SW system design & maintenance.
  • Direct SW programming & development of documentation.
  • Provide Cloud & Cloud Security guidance to leadership.
  • Develop a company's cloud computing strategy.
  • Develop & implement cloud strategies.
  • Convert technical requirements of project into architecture & design that will guide final product.
  • Design & implement cloud computing solutions, including designing cloud infrastructure, cloud application architecture, & cloud security architecture.
  • Leverage enterprise-wide version control system while designing & developing secure applications.
  • Analyze user needs & requirements to plan architecture.
  • Develop enterprise architecture or system components required to meet user needs.
  • Document & update as necessary all definition & architecture activities.
  • Prepare detailed workflow charts, models, & diagrams that describe input, output, & logical operation.
• Additional Tasks:
  • Design countermeasures & mitigations against potential exploitations of programming language weaknesses & vulnerabilities in system & elements.
  • Develop data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to mobile workforce.
  • Analyze results of SW, HW, or interoperability testing.
  • Analyze security needs & SW requirements to determine feasibility of design within time & cost constraints & security mandates.

Specific to this contract, this role provides Cloud Engineering support as part of the Network & System Support team, including, but not limited to:

• Provide support for engineering, deploying, & maintaining of high-availability cloud infrastructure within MS Azure IL2 environment to ensure mission-critical applications & data are hosted in secure, scalable, & resilient architecture that adheres to DoW Cloud Computing SRG standards.
• Configure & maintain MS Entra ID for centralized identity management & access, including RBAC, MFA, & PIM.
• Maintain network & Azure Cloud environment IAW DoW & Marine Corps IA policies to satisfy accreditation requirements, including creation & maintenance of required IA plans & documentation.
• Implement & enforce DISA STIGs & monitor Azure IL2 security posture using MS Defender for Cloud & Azure Sentinel.
• Configure VNets, NSGs, & ExpressRoute/VPN connectivity between on-premises facilities & Azure.
• Utilize Azure Monitor & Log Analytics to track system performance & consumption patterns & conduct cost-optimization to recommend right-sizing resources to ensure efficient use of Government funds.
• Deploy & configure core Azure resources such as VMs, storage accounts, virtual networks, & databases.
• Implement organization-wide policies using Azure Policy to ensure compliance & security standards.
• Track system health, uptime, & resource usage using Azure Monitor & Log Analytics.
• Diagnose & resolve cloud service issues, performance bottlenecks, & failed data pipelines.
• Configure & manage backups & site recovery solutions to ensure business continuity.
• Regularly review Azure Advisor recommendations for cost savings, reliability, & performance.
• Create & update systems architecture documentation to provide functional overview of solution & directly map technology capabilities & components to requirements.
• Create & maintain SOPs, work instructions, & job aids to document Government processes & procedures.
• Create detailed & accurate AARs to capture & describe outages, service interruptions, failures, or incidents to include lessons learned & recommendations.
• Track & report EoL & EoS dates, warranty & support status, & subscription & license expiration dates for all systems, SW, OS, firmware, tools, & subscriptions.