Principal Cloud Engineer

Nowges; Fort Meade (MD); Remote; USD 160,000 - 175,000; Full time

Job summary

GES is seeking an experienced Principal Cloud Systems Engineer to join our Defense Enclave Services (DES) team, supporting a DoD modernization program. This remote role requires an active SECRET or higher DoD clearance and expertise across Azure, AWS, or GCP cloud environments.

The engineer will design zero-trust network solutions, deploy and test cloud services, and ensure security requirements are met while modernizing DoD applications and networks.

Qualifications

• Bachelor’s degree and 12+ years of relevant experience.
• Experience designing, deploying, and operating Azure, AWS or GCP solutions.
• Experience with Virtual switches, VPCs, and Virtual Firewalls.
• Active SECRET or higher DoD clearance required.
• IAT Level II Certification such as Security+ or CISSP.

Responsibilities

• Design zero-trust network solutions for a hybrid on-premise and Azure enclave.
• Support cloud deployment of modernized network services.
• Enforce security practices and align with government requirements.
• Evaluate architectures across cloud and application modernization.
• Identify opportunities to reduce costs and improve efficiency.

Skills

Distributed Systems

Cloud Architecture

Zero-trust security

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

Azure

AWS

GCP

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

All Full Time DISA Headquarters - DC, Fort Meade, MD, US

Salary Range: $160,000.00 To $175,000.00 Annually

GES is seeking an experienced Principal Cloud Systems Engineer to join our Defense Enclave Services (DES) team, who will support an extensive digital modernization program critical to Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies. A Systems Engineer with a focus on Distributed Systems and understands how cloud infrastructure is built and maintained.

The position will support multiple engineering projects modernizing the DoD Environment, including the migration of applications and services from on-premise to the cloud for zero-trust network initiatives. These engineering efforts will include design, deployment, test, and migration of the network solutions the candidate develops.

JOB LOCATION: Remote

CLEARANCE REQUIREMENT: Must possess an Active SECRET or above DoD clearance to be considered. (US Citizenship required)

Primary Responsibilities

• Leverage experience in Systems Engineering and Architecture to design zero-trust network solutions for a hybrid on-premise and Azure enclave
• Demonstrate an understanding of system Virtualization and Design by ensuring network modernization efforts properly address security requirements and can be implemented without affecting operations.
• Support Cloud Deployment of modernized network services
• Develop modern and secure network solutions by demonstrating experience with Virtual switches, VPC’s, and Virtual Firewalls
• Provide inputs to the design of the enterprise’s cloud and mission architecture
• Evaluate and support application architectures across platforms to ensure alignment to cloud and application modernization strategies, capabilities and requirements
• Continually identify opportunities for improvement, including innovations aimed at improving the user experience, improving efficiencies, and lowering sustainment costs
• Enforce security best practices and guidelines, leveraging knowledge of security policies, network security, and data security

Required Qualifications

Bachelor’s degree or equivalent experience and 12+ years of prior relevant experience

Expertise designing, deploying, and operating solutions built on Azure, AWS or GCP

Experience with Virtual switches, VPC’s, and Virtual Firewalls

Experience with Identity Access Management (IDAM), AzureAD, and CyberArk, Okta or other modern ICAM solutions.

Understanding of Federal Government application, server, and network security requirements such as NIST, FedRAMP, and FISMA

Ability to work effectively within a distributed technical team, aided by strong written and verbal communication skills

Current IAT Level II (or higher) Certification such as Security + or CISSP

Desired Qualifications

Recognized cloud certification, such as Microsoft Azure Associate Administrator

Familiarity with the Atlassian suite, including Jira and Confluence