Remote AWS GovCloud Cloud Engineer | Automation & Security

Tripoint Solutions LLC

Philadelphia (Philadelphia County)

Remote

USD 120,000 - 160,000

Full time

8 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Medical, Dental, Vision benefits

401(k) Retirement Plan

PTO and holidays

Professional Development Reimbursement

Transportation, parking, and cellPhone

Job summary

Tripoint Solutions is seeking a Cloud Engineer to build, operate, and automate AWS GovCloud infrastructure for a federal education program. You will collaborate with the cloud team and Salesforce, integration, and data squads to keep environments secure, available, and compliant, replacing manual tasks with automation.

Remote work is supported; candidates must be located in the United States and eligible for federal clearance.

Qualifications

Bachelor's degree in CS, Engineering, IT, or related field.
5+ years of cloud engineering or operations experience.
Hands-on AWS GovCloud experience.
Experience integrating AWS with Salesforce and MuleSoft.
Infrastructure as code with CloudFormation or Terraform.
Proficiency with IAM policy design, KMS, and least-privilege access.
Linux system administration.
Proficiency in Python for automation and scripting.
CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins.
Git and version-controlled infrastructure workflows.
Cloud security principles and hardening practices.
Automating manual operational work.

Responsibilities

Provision, configure, and operate AWS GovCloud infrastructure, including EC2, S3, EBS, RDS, VPCs, subnets, security groups, and Route 53.
Author and maintain infrastructure as code in version control with automated validation.
Build and support integrations between AWS and Salesforce, including MuleSoft-based interfaces.
Build and maintain AWS Glue pipelines that move data securely between source systems.
Implement S3 lifecycle, tiering, and retention policies.
Secure RDS and other data services with least-privilege access, encryption, and network isolation.
Implement and maintain IAM policies, KMS key management, and secrets management.
Build automated security scanning, dependency validation, and continuous monitoring into CI/CD pipelines.
Support STIG implementation, RMF and ATO activities, and vulnerability remediation on contractual timelines.
Maintain deployment runbooks, rollback procedures, and change control artifacts that support high-availability standards.
Improve cost visibility through tagging, rightsizing, and cleanup of orphaned resources.
Automate operational work using Python.