Senior AWS Cloud Engineer: Federal Landing Zones & IAM

TechSur Solutions, LLC; Reston (VA); On-site; USD 150,000 - 165,000; Full time

Job summary

TechSur Solutions, LLC seeks a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer's AWS cloud foundation. You will transform a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment with multi-account landing zones and hub-and-spoke networking.

You will maintain production service levels, collaborate daily with customer architects, security staff, and the SAIC team, and implement IaC and CI/CD pipelines to enable the

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 9 years of experience deploying and configuring cloud environments, including significant hands-on AWS work.
• Production experience with Infrastructure-as-Code using Terraform and/or CloudFormation.
• Hands-on experience with AWS multi-account landing zones, VPC design, Transit Gateway, and Direct Connect or site-to-site VPN.
• Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC).
• Experience monitoring, patching, and troubleshooting Linux and Windows workloads in the cloud.
• Working knowledge of NIST SP 800-53 security controls in a federal environment.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design and deploy AWS landing zones, multi-account structures (AWS Organizations, Control Tower), and hub-and-spoke networking integrated with the customer's WAN and DNS.
• Build and maintain Infrastructure-as-Code (Terraform, CloudFormation) and GitOps workflows that provision production, integration, development, and sandbox environments.
• Implement IAM and federated access through the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
• Configure security and compliance guardrails (Service Control Policies, AWS Config, Security Hub, GuardDuty) against NIST SP 800-53 Rev 5 and customer security standards.
• Apply the enterprise tagging strategy for asset management, cost tracking, and chargeback/showback.
• Monitor environments with CloudWatch and enterprise tools such as Datadog, Splunk, and Dynatrace; integrate events, incidents, and changes with ServiceNow.
• Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
• Design and test high availability, backup, and disaster recovery for cloud workloads.
• Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.

Skills

AWS experience

Terraform

CloudFormation

IAM & SSO federation

NIST controls

VPC design

Direct Connect/VPN

SAML 2.0/OIDC

Linux/Windows

Education

Bachelor's degree in CS/IT/Engineering

Tools

Terraform

CloudFormation

GitLab

GitHub Actions

AWS CodePipeline

Job description

TechSur Solutions, LLC seeks a Senior Cloud Engineer with deep AWS expertise to design, build, and operate a federal customer's AWS cloud foundation. You will transform a cloud-agnostic enterprise architecture into a secure, well-governed AWS environment with multi-account landing zones and hub-and-spoke networking.

You will maintain production service levels, collaborate daily with customer architects, security staff, and the SAIC team, and implement IaC and CI/CD pipelines to enable the