Senior Cloud Administrator for Federal Gov Cloud

Benchstrength; Arlington (VA); On-site; USD 95,000 - 110,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Unlimited PTO

401k plan

Job summary

Knox is seeking a Cloud Administrator to secure, build, and operate multi-cloud infrastructure across AWS, Azure, and GCP, including government regions. The role covers IAM, network design, and system hardening to DISA STIGs and CIS Benchmarks within FedRAMP, NIST, CMMC, and IL5, using scripting and IaC to ensure repeatability and auditable changes.

It also supports on-premises employee infrastructure, manages office collaboration tools, patches workstations, and maintains audit-ready

Qualifications

• 5+ years of hands-on cloud infrastructure administration in two of AWS, Azure, and GCP.
• Experience operating in government cloud environments (AWS GovCloud, Azure Government, or GCP Assured Workloads).
• Proficiency with IAM, SSO, MFA, least privilege, and access reviews.
• Experience hardening systems to DISA STIGs and CIS Benchmarks; drift monitoring.
• Familiarity with FedRAMP, NIST SP 800-53/800-171, CMMC, and IL5 requirements.
• Proficiency in scripting (PowerShell, Bash, Python) and IaC tooling.

Responsibilities

• Manage IAM across AWS, Entra ID, and GCP with SSO, MFA, and access reviews.
• Design secure networks and manage encryption keys using KMS-style services.
• Maintain audit-ready documentation and support continuous monitoring and POA&M.
• Automate infrastructure with Terraform, CloudFormation, and Bicep across providers.
• Support incident response and feed cloud logs to the SIEM.

Skills

Cloud IAM

SaaS security

Scripting

IaC (Terraform, CloudFormation, Bicep)

Incident response & SIEM

Network security & encryption

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

AWS CloudFormation

Azure Bicep

AWS Direct Connect

Azure ExpressRoute

GCP Cloud Logging

Job description

Knox is seeking a Cloud Administrator to secure, build, and operate multi-cloud infrastructure across AWS, Azure, and GCP, including government regions. The role covers IAM, network design, and system hardening to DISA STIGs and CIS Benchmarks within FedRAMP, NIST, CMMC, and IL5, using scripting and IaC to ensure repeatability and auditable changes.

It also supports on-premises employee infrastructure, manages office collaboration tools, patches workstations, and maintains audit-ready