Senior Cloud Engineer - DoD RMF, Hybrid & Secure Cloud

Leidos; Reston (VA); Hybrid; USD 92,000 - 167,000; Full time

Job summary

Leidos in Reston, Virginia, seeks a senior Cloud Engineer to design and implement secure cloud architectures across unclassified and classified enclaves. You will automate infrastructure, manage IAM, and support Kubernetes workloads in a hybrid environment.

Ideal candidates have TS/SCI clearance and strong experience with AWS/Azure, Terraform, and CI/CD. The role emphasizes DoD RMF, NIST, and CIS/STIG compliance, plus ongoing security validation.

Qualifications

• TS/SCI clearance required.
• US citizenship required.
• 8–12 years of relevant experience for BS, or 6–10 years with Masters; may include a Doctorate.
• Experience designing or operating within AWS GovCloud (US) or Azure.
• Strong Terraform or CloudFormation experience and CI/CD expertise.
• Experience with IAM, MFA, and secure key management.

Responsibilities

• Architect, design, and deploy secure, scalable cloud solutions for unclassified and classified environments.
• Enable secure hybrid connectivity and data replication across enclaves.
• Maintain IaC using Terraform or CloudFormation and manage cloud networking.
• Support Kubernetes deployments, monitoring, and incident response.
• Ensure DoD RMF, NIST, and CIS/STIG compliance across environments.

Skills

AWS

Azure

Terraform

CloudFormation

Kubernetes

GitLab

Python

Windows Server

Active Directory

RMF/NIST

Education

BS degree

Masters degree

Doctorate

Tools

Terraform

CloudFormation

GitLab

Kubernetes

AWS GovCloud

Azure

ExpressRoute

VPC

KMS

Job description

Leidos in Reston, Virginia, seeks a senior Cloud Engineer to design and implement secure cloud architectures across unclassified and classified enclaves. You will automate infrastructure, manage IAM, and support Kubernetes workloads in a hybrid environment.

Ideal candidates have TS/SCI clearance and strong experience with AWS/Azure, Terraform, and CI/CD. The role emphasizes DoD RMF, NIST, and CIS/STIG compliance, plus ongoing security validation.