Senior AWS Cloud Engineer: Build Secure Federal Cloud

TechSur Solutions, LLC; Reston (VA); On-site; USD 150,000 - 165,000; Full time

Job summary

TechSurSolutions seeks a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer’s AWS foundation. Translate a cloud-agnostic enterprise architecture into a secure, well-governed multi-account environment with landing zones, hub-and-spoke networking, and federated identity.

You will work daily with customer architects, security staff, and the wider SAIC team, automate through Infrastructure-as-Code, and help the customer adopt the platform with confidence

Qualifications

• Bachelor's degree in Computer Science, IT, Engineering or related field.
• 9+ years deploying and configuring cloud environments with strong AWS hands-on work.
• Production experience with Terraform and/or CloudFormation.
• Experience with multi-account landing zones, VPCs, Transit Gateway, and direct connections.
• IAM federation using SAML 2.0 or OIDC; security and compliance knowledge.

Responsibilities

• Design and deploy AWS landing zones and multi-account structures with hub-and-spoke networking.
• Build and maintain IaC workflows (Terraform, CloudFormation) and GitOps for multiple environments.
• Implement IAM and federated access with SAML 2.0/OIDC; align with Zero Trust.
• Enforce security controls per NIST and customer standards; monitor and patch workloads.
• Prepare for ATO packages and support customer operations staff.

Skills

AWS expertise

Infra as Code

IAM federation

Security and compliance

Cloud architecture

Education

Bachelor's degree in Computer Science / IT / Engineering

Tools

Terraform

CloudFormation

AWS Organizations

Control Tower

VPC design

Transit Gateway

Direct Connect / VPN

SAML 2.0 / OIDC

Job description

TechSurSolutions seeks a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer’s AWS foundation. Translate a cloud-agnostic enterprise architecture into a secure, well-governed multi-account environment with landing zones, hub-and-spoke networking, and federated identity.

You will work daily with customer architects, security staff, and the wider SAIC team, automate through Infrastructure-as-Code, and help the customer adopt the platform with confidence