Senior Cloud Engineer

Pantheon Data; Charlotte (NC); Remote; USD 100,000 - 150,000; Full time

Job summary

Pantheon Data in the Washington, DC area is seeking a Senior Cloud Engineer to lead the operational management of AWS GovCloud environments, ensuring 99.9% availability and compliance with NIST 800-53 Rev 5 and CMMC 2.0 Level 2. You will partner with DevSecOps to automate using Terraform and manage multi-account setups, while providing escalation support for developers.

This role supports remote work within the United States and requires strong experience with cloud security, IaC, and AWS

Qualifications

• 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS GovCloud.
• Familiarity with managing LLM infrastructure and RAG pipelines.
• Terraform skills, including module development and remote state management in a cross-account environment.
• Advanced knowledge of VPC architecture (Transit Gateways, PrivateLink, VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS.
• Operational tooling: SSM, Config, and Grafana/CloudWatch for observability.
• Compliance frameworks: FedRAMP High, NIST SP 800-53, CMMC v2/3 controls.
• Ability to work effectively remotely in cross-functional teams.
• Proficiency with Microsoft Office suite (Outlook, Word, Excel, SharePoint, PowerPoint).

Responsibilities

• Environment Management: Provision and manage multi-account AWS GovCloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data.
• Cloud Operations & Monitoring: Day-to-day operations including automated patching (SSM), backup verification (AWS Backup), and continuous monitoring (CloudWatch, CloudTrail).
• Security & Compliance Ops: Regular security updates, image hardening, vulnerability remediation; ensure endpoints meet FIPS 140-3 requirements.
• CI/CD & Dev Support: Integrate GHAS into deployment workflows and troubleshoot cloud environment issues (IAM policy, VPC routing, EKS connectivity).
• Incident Response: Lead root-cause analysis for performance bottlenecks and production/staging incidents.

Skills

AWS

AWS GovCloud

LLM infrastructure

Python

Bash

Terraform

Networking

IAM ABAC/RBAC

KMS

SRE/DevOps

Kubernetes

EKS

GitHub Advanced Security

Security & compliance

Education

AWS Certified Solutions Architect – Associate

AWS Certified SysOps Administrator – Associate

Tools

Terraform

AWS Organizations

AWS Systems Manager

AWS Config

Grafana

CloudWatch

CloudTrail

KMS

EKS

Job description

Company Overview

Pantheon Data (a Kenific Holding company) is a private, small business based in the Washington, DC, area. Pantheon Data was founded in 2011, initially providing acquisition and supply chain management services to the US Coast Guard. Our service offerings have grown in the past ten years, including infrastructure resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and cybersecurity. We have also grown our customer base to include commercial clients. The company has used this experience to expand our service offerings to other agencies within the Department of Homeland Security (DHS), the Department of Defense (DoD), and other Federal Civilian Agencies.

Position Overview

Pantheon Data is seeking a Senior Cloud Engineer to lead the operational management and technical support of AWS GovCloud (US) environments. This role is critical in hosting secure federal workloads, including Generative AI (Bedrock) and ML (SageMaker) applications. You will ensure 99.9% availability, maintain compliance with NIST 800-53 Rev 5 and CMMC 2.0 Level 2, and serve as the primary technical escalation point for developers and DevSecOps engineers.

Responsibilities

• Environment Management: Provision and manage multi-account AWS GovCloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data.
• Cloud Operations & Monitoring: Execute day-to-day operations including automated patching (AWS Systems Manager), backup verification (AWS Backup), and continuous monitoring via Amazon CloudWatch and CloudTrail.
• Security & Compliance Ops: Perform regular security updates, image hardening (AMI/Container), and vulnerability remediation based on Amazon Inspector and Security Hub findings. Ensure all endpoints meet FIPS 140-3 requirements.
• CI/CD & Dev Support: Partner with DevSecOps to integrate GitHub Advanced Security (GHAS) into deployment workflows and provide deep-dive troubleshooting for developer-facing cloud environment issues (e.g., IAM policy debugging, VPC routing, and EKS connectivity).
• Incident Response: Lead root-cause analysis for performance bottlenecks and service interruptions in production and staging environments.

Required Skills and Experience

• Cloud Expertise: 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS GovCloud.
• AI/ML Infrastructure: Familiarity with managing LLM infrastructure and RAG pipelines.
• Infrastructure as Code: Terraform skills, including module development and remote state management in a cross-account environment.
• Networking & Security: Advanced knowledge of VPC architecture (Transit Gateways, PrivateLink, VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS.
• Operational Tooling: Proficiency with AWS Systems Manager (SSM) for fleet management, AWS Config for compliance tracking, and Grafana/CloudWatch for observability.
• Compliance Frameworks: Understanding of FedRAMP High, NIST SP 800-53, CMMC v2/3 technical controls.
• Ability to work effectively remotely in cross-functional teams.
• Ability to meet deadlines and produce quality work.
• Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint.

Preferred Skills and Experience

• Scripting: Advanced Python or bash for custom automation and Lambda-based lifecycle hooks.
• Kubernetes: Operational experience with Amazon EKS, specifically cluster upgrades and worker node group troubleshooting.
• Certification: AWS Certified Solutions Architect or AWS Certified SysOps Administrator – Associate.
• Leadership: Experience in mentoring junior engineers and contributing to architectural review boards (ARB).

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements. Secret Clearance is required for continued employment.

Work Location:

United States - Remote

• Our company prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
• If the position is remote or hybrid, you may periodically work from a Pantheon Data office location or client site.
• If this position is assigned to a Pantheon Data office location or client site, you'll work with colleagues and clients in person, as needed for specific client requirements.

Compensation

The salary range for this position is $100,000 - $150,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Benefits Overview

We are always looking for good people! Pantheon Data is committed to providing its employees with competitive salaries and benefits in order to increase employee satisfaction and productivity. In addition to our benefits, we also offer SmartBenefits through the Washington Metro Area Transportation Authority, where you specify an amount of your pre-tax wages be paid directly to your SmarTrip account. In some cases, tuition assistance may be available for continuing education expenses and certifications related to their position. Additional details may be found at https://pantheon-data.com/careers/

Pantheon Data Important Information

All qualified applicants will be considered for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our Talent Team at [e-mail] or by phone [phone].

This company uses E-Verify to confirm each employee's work authorization. For more information, click here E-Verify Participation Poster