Senior AWS Infrastructure Engineer – EKS, Terraform, FedRAMP

ECS; Fairfax (VA); Hybrid; USD 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work

Onsite 3 days/week

Job summary

Everforth ECS seeks an Infrastructure Engineer (AWS / Terraform / EKS) to design, build, and operate secure AWS environments within a FedRAMP and ATO-governed context. The role involves infrastructure-as-code, multi-account governance, and coordination with Security and program leadership in a hybrid Fairfax, VA setting.

The candidate will manage EKS clusters, VPC networking, and CI/CD automation while ensuring least-privilege access, auditability, and rapid deployment across GovCloud and

Qualifications

• Active DoD Secret clearance is required.
• Hybrid work up to 3 days onsite per week at Fairfax office.
• Bachelor's degree or 6 years of relevant experience.
• 6+ years designing, implementing, securing, and maintaining AWS Cloud infrastructure.

Responsibilities

• Troubleshoot and support enterprise load-balancing, DNS, TLS certificates, and routing.
• Design, build, and maintain Infrastructure-as-Code using Terraform.
• Provision and manage EKS clusters and IAM roles.
• Configure AWS VPC networking, including routing, TGWs, DNS, NACLs, endpoints, and security groups.
• Automate deployments with GitHub Actions and CI/CD policy gates.
• Collaborate with Security and Applications teams for compliance evidence and RMF/ATO documentation.

Skills

Cloud AWS

Networking

Automation

Security

Education

Bachelor's degree or 6 years experience

Active DoD Secret clearance

Tools

Terraform

EKS

AWS

GitHub Actions

Helm

S3/DynamoDB

OPA/tfsec

Job description

Everforth ECS seeks an Infrastructure Engineer (AWS / Terraform / EKS) to design, build, and operate secure AWS environments within a FedRAMP and ATO-governed context. The role involves infrastructure-as-code, multi-account governance, and coordination with Security and program leadership in a hybrid Fairfax, VA setting.

The candidate will manage EKS clusters, VPC networking, and CI/CD automation while ensuring least-privilege access, auditability, and rapid deployment across GovCloud and