Principal AWS Cloud Engineer

MANTECH; Chantilly (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

MANTECH seeks a motivated Principal AWS Cloud Engineer to serve as the primary AWS technical authority on an enterprise cloud team in Chantilly, VA. You will anchor design, deployment, and security management of our AWS environment—with strong focus on cloud security monitoring and threat detection—while supporting cross-cloud alignment with Azure and OCI.

The role emphasizes IaC/CaC leadership, IAM governance, and multi-account security, with collaboration across engineering teams to ensure

Qualifications

• 7+ years of cloud computing/engineering experience.
• Experience designing, building, and securing enterprise AWS environments.
• Active DoD 8570/8140 IAT Level II certification or ability to obtain within 30 days of hire.

Responsibilities

• Serve as principal SME for administration, security hardening, and management of AWS enterprise infrastructure.
• Architect, deploy, and optimize automated cloud security monitoring and threat detection pipelines.
• Lead IaC/CaC with Terraform or CloudFormation following a code-first, audited workflow.
• Enforce IAM governance, SCPs, least-privilege access, and Zero Trust across multi-account AWS Organizations.
• Provide Tier 3 escalation support for complex technical challenges across AWS and connected environments.
• Write automation scripts in Python, Bash, or PowerShell to streamline operations and telemetry.
• Collaborate with engineering/ops to align AWS security baselines with Azure/OCI.

Skills

AWS

Cloud security

Python

Terraform

CloudFormation

IAM

Bash

PowerShell

Zero Trust

AWS CLI

Education

Bachelor's degree or equivalent

Tools

Terraform

CloudFormation

AWS CLI

Job description

MANTECH seeks a motivated, career-driven Principal AWS Cloud Engineer to serve as the primary AWS technical authority on an enterprise cloud team in Chantilly, VA.

The Principal AWS Cloud Engineer anchors the design, deployment, and security management of our primary AWS environment - with a strong focus on cloud security monitoring and threat detection - while supporting cross-cloud security alignment across Azure and Oracle Cloud Infrastructure (OCI).

Responsibilities Include But Are Not Limited To

• Serving as the principal subject matter expert for the administration, security hardening, and management of AWS enterprise infrastructure and cloud footprint.
• Architecting, deploying, and optimizing automated cloud security monitoring, threat detection, and event-driven logging pipelines using AWS Security Hub, GuardDuty, AWS Config, CloudTrail, CloudWatch, EventBridge, and Lambda.
• Leading the deployment of Infrastructure as Code (IaC) and Configuration as Code (CaC) solutions using Terraform or AWS CloudFormation following a code-first, audited workflow.
• Enforcing IAM governance, Service Control Policies (SCPs), least-privilege access, permission boundaries, and Zero Trust security architectures across multi-account AWS Organizations.
• Providing Tier 3 escalation support to diagnose and resolve complex technical, network, security, and performance challenges across AWS and connected environments.
• Writing and maintaining robust automation scripts in Python, Bash, or PowerShell to streamline operations, vulnerability remediation, and system health telemetry.
• Collaborating across engineering and operational teams to align AWS security baselines with secondary cloud environments (Azure, OCI) and documenting automated workflows and Service Design Packages to ensure audit readiness.

Minimum Qualifications

• Bachelor's degree or an additional 4+ years of IT/engineering experience in lieu of a degree
• 7+ years of cloud computing/engineering experience.
• Active DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CCNA Security, CySA+, SSCP, GSEC) or the ability to obtain with 30 days of hire.
• Experience designing, building, and securing enterprise AWS environments leveraging EC2, S3, IAM, VPC, Route53, RDS, CloudFront, and Lambda.
• Proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting languages (Python, Bash, PowerShell) executing via AWS CLI.
• Proven expertise in configuring multi-account governance, Zero Trust security architectures, and automated cloud security monitoring pipelines.

Preferred Qualifications

• Advanced experience with AWS-native security services (Security Hub, Config, GuardDuty, Inspector, Macie, Detective, IAM Access Analyzer).
• Active AWS Certifications (e.g., AWS Certified Solutions Architect - Professional or AWS Certified Security - Specialty).
• Hands-on familiarity or adaptability with secondary cloud platforms (Azure or OCI).
• Solid understanding of federal compliance frameworks, including NIST SP 800-53, FIPS-199, RMF, and DoD Cloud Security Requirements Guide (SRG).
• Experience with container security and orchestration platforms (Docker, Kubernetes, Red OpenShift) and modern CI/CD or Atlassian toolsets.

Clearance Requirements

• An active TS/SCI with Polygraph.

Physical Requirements

• Must be able to remain in a stationary position 50-75% of the time.
• Constantly operates a computer and other office productivity machinery.
• Frequently communicates with co-workers, leadership, and customers; must be able to exchange accurate information in these situations.