Principal Cloud Engineer

Global-Enterprise-Services,-LL; Fort Meade (MD); Remote; USD 160,000 - 175,000; Full time

Job summary

GES is seeking an experienced Principal Cloud Systems Engineer to join our Defense Enclave Services (DES) team, supporting a major digital modernization program for DISA/DoD Fourth Estate Agencies. The role focuses on cloud infrastructure and zero-trust network implementations, migrating applications from on-prem to the cloud, and delivering secure network solutions.

The ideal candidate has 12+ years of relevant experience with Azure/AWS/GCP, ICAM solutions, and federal security standards (NIST,

Qualifications

• Bachelor’s degree or equivalent experience and 12+ years of prior relevant experience.
• Expertise designing, deploying, and operating solutions built on Azure, AWS or GCP.
• Experience with Virtual switches, VPC’s, and Virtual Firewalls.
• Experience with Identity Access Management (IDAM), AzureAD, and CyberArk, Okta or other modern ICAM solutions.
• Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, and FISMA.
• Ability to work effectively within a distributed technical team, aided by strong written and verbal communication skills.
• Current IAT Level II (or higher) Certification such as Security + or CISSP.

Responsibilities

• Leverage experience in Systems Engineering and Architecture to design zero-trust network solutions for a hybrid on-premise and Azure enclave.
• Demonstrate an understanding of system Virtualization and Design by ensuring network modernization efforts properly address security requirements and can be implemented without affecting operations.
• Support Cloud Deployment of modernized network services.
• Develop modern and secure network solutions by demonstrating experience with Virtual switches, VPC’s, and Virtual Firewalls.
• Provide inputs to the design of the enterprise’s cloud and mission architecture.
• Evaluate and support application architectures across platforms to ensure alignment to cloud and application modernization strategies, capabilities and requirements.
• Continually identify opportunities for improvement, including innovations aimed at improving the user experience, improving efficiencies, and lowering sustainment costs.
• Enforce security best practices and guidelines, leveraging knowledge of security policies, network security, and data security.

Skills

Azure

AWS

GCP

Virtual switches

VPCs

Virtual Firewalls

IDAM

AzureAD

CyberArk

Okta

NIST

FedRAMP

FISMA

Communication

IAT II Certification

Security+

CISSP

Education

Bachelor’s degree or equivalent experience

Tools

Jira

Confluence

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

All Full Time DISA Headquarters - DC, Fort Meade, MD, US

3 days ago Requisition ID: 1417

Salary Range: $160,000.00 To $175,000.00 Annually

GES is seeking an experienced Principal Cloud Systems Engineer to join our Defense Enclave Services (DES) team, who will support an extensive digital modernization program critical to Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies. A Systems Engineer with a focus on Distributed Systems and understands how cloud infrastructure is built and maintained.

The position will support multiple engineering projects modernizing the DoD Environment, including the migration of applications and services from on-premise to the cloud for zero-trust network initiatives. These engineering efforts will include design, deployment, test, and migration of the network solutions the candidate develops.

JOB LOCATION: Remote

CLEARANCE REQUIREMENT: Must possess an Active SECRET or above DoD clearance to be considered. (US Citizenship required)

Primary Responsibilities

• Leverage experience in Systems Engineering and Architecture to design zero-trust network solutions for a hybrid on-premise and Azure enclave
• Demonstrate an understanding of system Virtualization and Design by ensuring network modernization efforts properly address security requirements and can be implemented without affecting operations.
• Support Cloud Deployment of modernized network services
• Develop modern and secure network solutions by demonstrating experience with Virtual switches, VPC’s, and Virtual Firewalls
• Provide inputs to the design of the enterprise’s cloud and mission architecture
• Evaluate and support application architectures across platforms to ensure alignment to cloud and application modernization strategies, capabilities and requirements
• Continually identify opportunities for improvement, including innovations aimed at improving the user experience, improving efficiencies, and lowering sustainment costs
• Enforce security best practices and guidelines, leveraging knowledge of security policies, network security, and data security

Required Qualifications

Bachelor’s degree or equivalent experience and 12+ years of prior relevant experience

Expertise designing, deploying, and operating solutions built on Azure, AWS or GCP

Experience with Virtual switches, VPC’s, and Virtual Firewalls

Experience with Identity Access Management (IDAM), AzureAD, and CyberArk, Okta or other modern ICAM solutions.

Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, and FISMA

Ability to work effectively within a distributed technical team, aided by strong written and verbal communication skills

Current IAT Level II (or higher) Certification such as Security + or CISSP

Desired Qualifications

Recognized cloud certification, such as Microsoft Azure Associate Administrator

Familiarity with the Atlassian suite, including Jira and Confluence