Cloud Infrastructure Engineer (Zero Trust Focus)

Nakupuna Companies; Honolulu (HI); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

On-site work in HI/VA

Job summary

Nakupuna Companies is seeking an experienced Cloud Infrastructure Engineer to design, build, and operate enterprise cloud environments with a Zero Trust focus. You will strengthen security, automate processes, and support DoD-authorized clouds as part of a proactive technical team.

Preferred candidates have DoD experience, hands-on IaC, and containerization skills. The role is based on-site in Arlington, VA or Honolulu, HI with occasional travel and strong emphasis on security and governance.

Qualifications

• Bachelor's degree in a STEM field from an accredited institution or equivalent experience.
• Minimum of five years in IT with at least four years supporting cloud infrastructure and engineering.
• Experience supporting DoD or Federal IT environments is preferred.
• Active DoD IAT II level certification such as CompTIA Security+ is required.

Responsibilities

• Design, implement, and maintain secure and scalable cloud infrastructure using IaC tools such as Terraform, AWS CDK, or Bicep.
• Apply Zero Trust principles with identity controls, network segmentation, and continuous monitoring.
• Manage advanced cloud networking: VPCs, transit gateways, private endpoints, and hybrid connectivity.
• Build and operate containerized workloads with EKS or AKS, including container security practices.
• Develop automation scripts (Python/PowerShell) to improve efficiency and security.
• Contribute to cloud governance with security policies, compliance, and cost guardrails.
• Escalate and troubleshoot complex infra, network, and security issues.
• Integrate security into CI/CD pipelines for DevSecOps deployments.
• Evaluate and recommend new cloud services to improve security and performance.
• Collaborate with architects to translate designs into implementations.

Skills

AWS

Azure

Kubernetes

IAM/RBAC

Zero Trust

IaC

Security

Troubleshooting

Education

Bachelor's degree in STEM

5+ years IT experience

Tools

Terraform

AWS CDK

Bicep

Job description

Overview

Nakupuna Companies is seeking an experienced and hands-\u2011on Cloud Infrastructure Engineer to help design, build, and operate our customers' enterprise cloud environments with a focus on Zero Trust principles. This engineer will be a key technical contributor, responsible for implementing and managing cloud infrastructure, strengthening security, and driving automation within DoD-authorized cloud environments. This position is ideal for a proactive engineer who excels at building and securing cloud solutions, can independently troubleshoot complex issues, and can contribute to the strategic direction of the cloud platform.

Overview

Nakupuna Companies is seeking an experienced and hands-\u2011on Cloud Infrastructure Engineer to help design, build, and operate our customers' enterprise cloud environments with a focus on Zero Trust principles. This engineer will be a key technical contributor, responsible for implementing and managing cloud infrastructure, strengthening security, and driving automation within DoD-authorized cloud environments. This position is ideal for a proactive engineer who excels at building and securing cloud solutions, can independently troubleshoot complex issues, and can contribute to the strategic direction of the cloud platform.

Responsibilities

The following reflects management’s definition of essential functions for this job but does not restrict the tasks that may be assigned.

• Design, implement, and maintain secure and scalable cloud infrastructure using Infrastructure as Code (IaC) tools such as Terraform, AWS CDK, or Bicep.


• Apply Zero Trust principles by implementing robust identity and access controls, network segmentation, and continuous monitoring across the cloud environment.


• Implement and manage advanced cloud networking services, including VPCs, transit gateways, private endpoints, and hybrid connectivity.


• Build and operate containerized workloads using services like Amazon EKS or Azure Kubernetes Service, including the implementation of container security best practices.


• Develop and maintain automation scripts (e.g., using Python or PowerShell) to improve operational efficiency, security compliance, and infrastructure management.


• Contribute to the cloud governance framework by implementing and monitoring security policies, compliance controls, and cost management guardrails.


• Serve as a technical escalation point for complex infrastructure, networking, and security issues, providing expert-level troubleshooting and resolution.


• Integrate security and compliance controls into CI/CD pipelines, supporting DevSecOps practices and enabling automated, secure deployments.


• Evaluate and recommend new cloud services and technologies to improve security posture, operational effectiveness, and performance.


• Collaborate with architects and stakeholders to contribute to the cloud technology roadmap and translate architectural designs into functional implementations.

Qualifications

Skills/Qualifications:

• Strong hands-\u2011on experience deploying, administering, and troubleshooting solutions within a major commercial cloud platform (AWS or Microsoft Azure).


• Proficient in core cloud infrastructure concepts, including compute, storage, networking, IAM, and security.


• Demonstrated experience implementing cloud security and Zero Trust principles, including IAM/RBAC, least-\u2011privilege access, secrets management, and segmentation.


• Hands-\u2011on experience with Infrastructure as Code (IaC) and scripting using technologies such as Terraform, Python, or PowerShell.


• Experience deploying or managing containerized applications using Kubernetes, Docker, or similar technologies.


• Familiarity with DevSecOps practices, CI/CD pipelines, and integrating security into engineering workflows.


• Proven ability to troubleshoot complex issues across cloud infrastructure, networking, and security layers.


• Experience with AWS GovCloud, Azure Government, or supporting DoD environments is highly preferred.

Education/Experience

• Bachelor's degree in a STEM field from an accredited institution, or equivalent combination of education and professional experience.


• Minimum of five (5) years of relevant professional IT experience, including at least four (4) years of hands-\u2011on experience supporting cloud infrastructure, cloud engineering, or a closely related technical discipline.


• Experience supporting DoD or other Federal IT environments is preferred.

Certification

• Required:




• Active certification satisfying DoD Information Assurance Technical (IAT) Level II requirements, such as CompTIA Security+.




• Preferred:




• An associate or professional-\u2011level cloud certification from a major cloud service provider (e.g., AWS Certified Solutions Architect, Microsoft Certified: Azure Administrator Associate).

Clearance Requirement

s: Must currently have at least a Secret level security clearance (if located in HI) or Top Secret (if located in Virginia). Must be a U.S. citizen.

Work Location

• Position is based in Arlington, VA or Honolulu, HI.


• Preferred: on-site four (4) days per week. Will consider fewer days on-site for the correct candidate.


• Occasional travel (approximately 1-2 weeks per year) within the Continental U.S. or to Hawaii may be required.


• Occasional work outside normal business hours may be required to support planned maintenance, deployments, upgrades, or incident-\u2011response activities.

Physical Requirements

The ideal candidate must at a minimum be able to meet the following physical requirements of the job with or without reasonable accommodation:

• Ability to perform repetitive motions with the hands, wrists, and fingers.


• Ability to engage in and follow audible communications in emergency situations.


• Ability to sit for prolonged periods at a desk and working on a computer.

The Nakupuna Companies use a market-\u2011based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-\u2011specific affordability, organizational requirements, and position location. The projected compensation range for this position is $130,000.00 to $160,000.00 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.