Senior AWS Cloud Engineer

Votaw Precision Technologies LLC; Santa Fe Springs (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Votaw Precision Technologies, LLC seeks a Senior AWS Cloud Engineer to build and own a GovCloud platform for CUI and manufacturing data. You will design the landing zone, establish infrastructure-as-code standards, and create a secure data architecture that connects shop-floor data to analytics.

You will implement encryption, access controls, and secure connectivity while driving CI/CD automation and scalable cloud operations in a fast-paced, regulated manufacturing environment.

Qualifications

• 7+ years of cloud engineering with hands-on AWS experience.
• Direct experience with AWS GovCloud (US), preferred.
• Strong AWS networking: VPC, Transit Gateway, hybrid connectivity.
• Proficient in infrastructure-as-code and CI/CD automation.
• Experience designing secure data pipelines/data lakes on AWS.
• Familiarity with FedRAMP/NIST/CMMC controls in cloud contexts.
• Ability to work independently in a fast-growing environment.

Responsibilities

• Design and build the GovCloud landing zone with networking, identity, guardrails, and logging.
• Establish IaC standards using Terraform/CloudFormation for repeatable, auditable environments.
• Build secure platform data architecture with secure ingestion from shop floor IoT and data lake.
• Stand up secure access via bastion hosts, Direct Connect/VPN, least-privilege access.
• Implement encryption in transit and at rest, KMS management, immutable logging.
• Own cloud networking including VPC design, Transit Gateway, Direct Connect/VPN.
• Automate delivery with CI/CD pipelines and Git-based workflows.
• Monitor health, logs, observability, and cost optimization for a lean platform.
• Collaborate on M&A data integration patterns to unify acquired sites.

Skills

AWS GovCloud-US

Networking (VPC/Direct Connect)

IaC (Terraform/CloudFormation)

CI/CD & Git workflows

Data pipelines / data lake

Security/compliance (FedRAMP/NIST/CMMC

Independent work in startup env

Education

Bachelor's degree in technical field

Tools

Terraform

CloudFormation

Git

AWS

Direct Connect

Job description

Description

Company Background and Summary

Vela is a Cerberus-backed aerospace and defense manufacturing platform building the enterprise infrastructure, capabilities, and operational foundation to support a growing network of manufacturing companies, including Votaw Precision Technologies. Through its operating companies, Vela supports demanding aerospace, defense, and industrial programs by combining advanced manufacturing expertise with scalable business and technology infrastructure.

The Senior AWS Cloud Engineer will build and own Vela’s cloud foundation in AWS GovCloud (US), where CUI and manufacturing data will reside. This hands‑on role will establish the landing zone, infrastructure-as-code standards, and secure data architecture connecting manufacturing operations to analytics. The engineer will help build the cloud environment that supports Vela and its operating companies as the platform grows.

What You Will Own (Essential Functions)

• Design and build the GovCloud landing zone in AWS GovCloud (US) accounts, networking, identity, guardrails, and logging aligned to FedRAMP High / CMMC L2 expectations.
• Establish infrastructure-as-code standards using infrastructure-as-code (Terraform, CloudFormation, or similar) so the environment is version-controlled, repeatable, and auditable.
• Build the platform data architecture— secure ingestion from the shop floor via industrial IoT / edge connectivity, a CUI-tiered data lake, and downstream analytics.
• Stand up secure access — bastion/jump hosts, private connectivity (Direct Connect/VPN), and least-privilege access patterns for a controlled environment.
• Implement FIPS‑validated encryption in transit and at rest, KMS key management, immutable logging, and boundary controls.
• Own cloud networking — VPC design, Transit Gateway, and Direct Connect/VPN connectivity to on‑prem sites, in partnership with the network engineer.
• Establish delivery automation with CI/CD pipelines and Git‑based workflows so infrastructure and deployments are automated and repeatable.
• Own operational health — monitoring, logging, and observability (e.g., CloudWatch), plus cost visibility and optimization discipline appropriate to a lean, PE‑backed platform.
• Partner on M&A integration to integrate acquired companies’ data and systems into the platform on a repeatable pattern.

Requirements

Qualifications and Skills

Education & Experience

• 7+ years of cloud engineering, with deep hands‑on AWS experience.
• Direct experience with AWS GovCloud (US) (not only commercial AWS) — 2+ years in GovCloud or another accredited/regulated cloud strongly preferred.
• Strong AWS networking skills — VPC, Transit Gateway, and hybrid connectivity (Direct Connect/VPN).
• Strong infrastructure‑as‑code skills (Terraform, CloudFormation, or similar) and CI/CD / Git‑based automation.
• Experience designing secure data pipelines / data lakes on AWS (S3, IAM, KMS, VPC, networking).
• Familiarity with CMMC / NIST SP 800‑171 or FedRAMP control expectations in a cloud context (a plus; willingness to learn required).
• Comfortable operating independently in an early‑stage environment and documenting for a team that will grow around them.

Preferred Qualifications

• Industrial IoT / edge experience — AWS IoT Greengrass / SiteWise, Azure IoT, or similar OT data‑ingestion technologies.
• Manufacturing or defense‑sector cloud experience.
• AWS certifications (Solutions Architect / DevOps / Security).
• Bachelors in a technical field or equivalent hands‑on experience.
• Experience integrating acquired companies onto a common cloud platform.

Key Performance Indicators

• Establish and maintain a secure AWS GovCloud foundation aligned with CMMC Level 2/NIST 800‑171 requirements.
• Implement repeatable, version‑controlled infrastructure‑as‑code and CI/CD automation.
• Deliver secure, scalable manufacturing data architecture connecting shop‑floor systems to analytics.
• Maintain 99.9%+ availability, monitoring, logging, and operational resilience for critical cloud services.
• Maintain strong cloud security, access controls, encryption, and audit readiness.
• Establish repeatable cloud integration patterns for new sites and M&A activity.
• Optimize cloud infrastructure for security, scalability, performance, and cost.
• Maintain accurate architecture, security, and operational documentation.

Personal Attributes

• Highly self‑motivated and directed.
• Keen attention to detail.
• Ability to effectively prioritize and execute tasks in a high‑pressure environment.
• Ability to work both independently and in a team‑oriented, collaborative environment.

Work Conditions

• Ability to work onsite, including hours outside of a normal working day, to meet critical deadlines.
• This position operates within a precision manufacturing environment supporting the production of mission‑critical aerospace and defense components. Success requires a high sense of urgency, attention to detail, proactive problem‑solving, and the ability to coordinate effectively across multiple departments to ensure uninterrupted manufacturing operations and customer delivery commitments.
• Ability to work safely in a manufacturing environment, including walking the production floor, climbing stairs or ladders, occasionally lifting up to 25 pounds, and wearing required personal protective equipment (PPE).

Additional Requirements

• This position requires the use of information or access to hardware subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons as defined by ITAR.
• Able to obtain and maintain a U.S. security clearance.

Your actual level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job-related knowledge, skills, education, and experience.

Votaw Precision Technologies, LLC is an Equal Opportunity Employer including Disability/Vets.