Senior AWS Cloud Engineer - Federal Landing Zones & IaC

Devopsroles; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

TechSurSolutions is seeking a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer's AWS cloud foundation. You will translate a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment with multi-account landing zones and hub-and-spoke networking.

You will collaborate with customer architects, security staff, and the SAIC team, automate via Infrastructure-as-Code, and help customer IT staff adopt the platform.

Qualifications

• Bachelor's degree in CS/IT/Engineering or related field.
• 9+ years deploying cloud environments with hands-on AWS.
• Experience with Infrastructure-as-Code (Terraform/CloudFormation).
• Hands-on with multi-account AWS landing zones and VPC design.
• Knowledge of IAM, SAML 2.0/OIDC federation.
• Familiar with federal security controls (NIST 800-53).

Responsibilities

• Design and deploy AWS landing zones and hub-and-spoke networks.
• Build and maintain IaC workflows for prod/dev/test/sandbox.
• Implement IAM and federated access per SAML 2.0/OIDC.
• Configure security guardrails against NIST SP 800-53 Rev 5.
• Monitor environments and integrate with tools like CloudWatch, Datadog, Splunk.
• Support 24/7 operations and DR/HA planning.
• Write runbooks and transfer knowledge to customer staff.

Skills

AWS

Terraform

CloudFormation

IAM

SAML 2.0 / OIDC

Zero Trust

Linux/Windows

Security & Compliance

VPC design

Education

Bachelor's degree in CS/IT/Engineering

Tools

AWS Organizations

Control Tower

GitOps

Datadog

Splunk

Dynatrace

ServiceNow

CloudWatch

Job description

TechSurSolutions is seeking a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer's AWS cloud foundation. You will translate a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment with multi-account landing zones and hub-and-spoke networking.

You will collaborate with customer architects, security staff, and the SAIC team, automate via Infrastructure-as-Code, and help customer IT staff adopt the platform.