DELIVERY Senior Cloud Engineer - AWS Reston, VA

TechSur Solutions, LLC; Reston (VA); On-site; USD 150,000 - 165,000; Full time

Job summary

TechSur Solutions, LLC seeks a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer's AWS cloud foundation. You will transform a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment with multi-account landing zones and hub-and-spoke networking.

You will maintain production service levels, collaborate daily with customer architects, security staff, and the SAIC team, and implement IaC and CI/CD pipelines to enable the

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on AWS work.
• Production experience with Infrastructure-as-Code using Terraform and/or CloudFormation.
• Hands-on experience with AWS multi-account landing zones, VPC design, Transit Gateway, and Direct Connect or site-to-site VPN.
• Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Linux and Windows workloads in the cloud.
• Working knowledge of NIST SP 800-53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design and deploy AWS landing zones, multi-account structures (AWS Organizations, Control Tower), and hub-and-spoke networking integrated with the customer's WAN and DNS.
• Build and maintain Infrastructure-as-Code (Terraform, CloudFormation) and GitOps workflows that provision production, integration, development, and sandbox environments.
• Implement IAM and federated access through the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Configure security and compliance guardrails (Service Control Policies, AWS Config, Security Hub, GuardDuty) against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback.
• Monitor environments with CloudWatch and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, backup, and disaster recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Skills

AWS experience

Terraform

CloudFormation

IAM & SSO federation

NIST controls

VPC design

Direct Connect/VPN

SAML 2.0/OIDC

Linux/Windows

Education

Bachelor's degree in CS/IT/Engineering

Tools

Terraform

CloudFormation

GitLab

GitHub Actions

AWS CodePipeline

Job description

• Active Government Security Clearance: No
• Compensation: USD 150,000 - USD 165,000 - yearly

Company Description

TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.

Job Description

TechSur is seeking a Senior Cloud Engineer with deep Amazon Web Services expertise to design, build, and operate a federal customer's AWS cloud foundation. You will turn a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment: multi-account landing zones, hub-and-spoke networking, and federated identity.

Once the foundation is in place, you will keep it running at production service levels. You will work daily with customer architects, security staff, and the wider SAIC team, automate through Infrastructure-as-Code, and help the customer's IT staff adopt the platform with confidence.

Key Responsibilities

• Design and deploy AWS landing zones, multi-account structures (AWS Organizations, Control Tower), and hub-and-spoke networking integrated with the customer's WAN and DNS.
• Build and maintain Infrastructure-as-Code (Terraform, CloudFormation) and GitOps workflows that provision consistent production, integration, development, and sandbox environments.
• Implement IAM and federated access through the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Configure security and compliance guardrails (Service Control Policies, AWS Config, Security Hub, GuardDuty) against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback.
• Monitor environments with CloudWatch and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, backup, and disaster recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on AWS work.
• Production experience with Infrastructure-as-Code using Terraform and/or CloudFormation.
• Hands-on experience with AWS multi-account landing zones, VPC design, Transit Gateway, and Direct Connect or site-to-site VPN.
• Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Linux and Windows workloads in the cloud.
• Working knowledge of NIST SP 800-53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Preferred Qualifications

• AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional.
• AWS Certified Security – Specialty or HashiCorp Certified Terraform Associate.
• Experience in FedRAMP Moderate/High or AWS GovCloud environments, including support for ATO packages.
• Working knowledge of Azure, Google Cloud, or Oracle Cloud Infrastructure.
• Experience with policy-as-code (OPA/Rego, Checkov), Ansible, and CI/CD tools such as GitLab, GitHub Actions, or AWS CodePipeline.
• Experience integrating cloud tooling with ServiceNow ITSM and CMDB.
• Prior support of a civilian federal agency.

Additional Information

All your information will be kept confidential according to EEO guidelines.