Senior Cloud Engineer

Socket.dev; Bethesda (MD); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid time off

Professional development support

Dental

Job summary

Socket.dev is seeking a Senior Cloud Engineer to design, deploy, and operate FedRAMP-compliant cloud infrastructure in support of a complex federal IT environment. You will build secure, scalable solutions across AWS GovCloud and/or Azure Government, collaborating with security, application, and operations teams.

The role requires hands-on experience with Terraform, CloudFormation or Bicep, and strong knowledge of federal cloud boundaries and security controls.

Qualifications

• Bachelor's degree required in a relevant field.
• 6+ years of cloud engineering experience with 3+ years on AWS GovCloud or Azure Government.
• Active AWS Solutions Architect Associate/Professional or Microsoft Azure Solutions Architect Expert certification.
• Proficiency with IaC tools including Terraform; CloudFormation or Bicep preferred.
• Strong understanding of cloud networking, IAM/RBAC/Entra ID, and encryption in federal environments.
• Familiarity with FedRAMP authorization processes and cloud boundary documentation.

Responsibilities

• Design and implement cloud architectures on AWS GovCloud or Azure Government for federal workloads.
• Develop and maintain Infrastructure as Code (Terraform, CloudFormation, Bicep) for repeatable provisioning.
• Implement cloud security controls aligned with FedRAMP, NIST 800-53, and agency standards.
• Configure and manage VPCs, subnets, security groups, firewalls, and connectivity.
• Automate cloud operations through scripting (Python, Bash, PowerShell) and pipelines.
• Monitor cloud environments and respond to incidents using native and third-party tools.
• Support cloud cost management and optimization strategies.

Skills

Cloud engineering

FedRAMP knowledge

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Terraform

CloudFormation

Bicep

Job description

POSITION SUMMARY

We are seekinga Senior Cloud Engineer to design, deploy, and operate cloud infrastructure in support of a complex federal IT environment. This role is responsible for building secure, scalable, and FedRAMP-compliant cloud solutions across AWS GovCloud and/or Azure Government, working closely with security, application, and operations teams.

KEY RESPONSIBILITIES

• Design and implement cloud architectures on AWS GovCloud or Azure Government for federal workloads, including compute, networking, storage, and managed services
• Develop and maintain Infrastructure as Code (Terraform, CloudFormation, Bicep) for repeatable, auditable provisioning
• Implement cloud security controls aligned with FedRAMP authorization boundaries, NIST 800-53, and agency security standards
• Configure and manage virtual networking, VPCs, subnets, security groups, firewalls, and VPN/Direct Connect or ExpressRoute connectivity
• Automate cloud operations through scripting (Python, Bash, PowerShell) and pipeline integrations
• Monitor cloud environments using native and third-party tools (CloudWatch, Azure Monitor, Datadog); respond to incidents and optimize performance
• Support cloud cost management, right-sizing, and Reserved Instance/Savings Plan strategies

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Engineering, or related field
• 6+ years of cloud engineering experience with 3+ years on AWS GovCloud or Azure Government
• Active AWS Solutions Architect Associate/Professional or Microsoft Azure Solutions Architect Expert certification
• Proficiency with IaC tools: Terraform required; CloudFormation or Bicep preferred
• Strong understanding of cloud networking, identity (IAM/RBAC/Entra ID), and encryption in federal environments
• Familiarity with FedRAMP authorization processes and cloud boundary documentation

Clearance:

Must be eligible to obtain and maintain a federal Public Trust background investigation (MBI or HBI). U.S. citizenship or permanent residency required.

PREFERRED QUALIFICATIONS

• AWS Security Specialty or Microsoft Cybersecurity Architect certification
• Experience with containerized workloads on AWS EKS or Azure AKS in a GovCloud context
• Exposure to NIH, HHS, or federal research computing environments
• Experience with cloud-native security posture management (CSPM) tools

BENEFITS

• competitive salary
• health
• dental
• vision
• 401(k)
• paid time off
• professional development support

Avyanna LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.