Senior Cloud Solutions Engineer

Mtsi Va; Huntsville (AL); On-site; USD 160,000 - 210,000; Full time

Job summary

MTSI seeks a Senior Cloud Solutions Engineer to join the team supporting the Missile Defense Agency in Huntsville, AL. You will architect mission workloads and build automated DevSecOps pipelines to deploy across IL5/IL6 environments, with modern cloud-native approaches and secure-by-design software factories.

You will lead modernization of legacy defense apps, design target-state architectures for GovCloud/Azure Government and on-prem data centers, and embed RMF-compliant security checks into

Qualifications

• Active DoD Secret or Top Secret clearance (TS/SCI preferred).
• DoD 8140/8570 IASAE Level II or III requirements (CISSP/CASP+/CISSP-ISSEP).
• 8+ years IT infra or software engineering, 5+ years cloud workloads/DevSecOps in federal/DoD.
• Hybrid cloud across AWS GovCloud, Azure Government, and on-prem VMware vSphere.
• Deep knowledge of security scanners and RMF compliance (SAST/DAST/SCA, DISA STIG, OPA).
• IaC mastery with CloudFormation and Terraform.

Responsibilities

• Analyze legacy DoW apps and design IL5/IL6 target architectures.
• Re-platform workloads with hardened containers and Kubernetes; cloud-native options.
• Architect end-to-end CI/CD pipelines per DoD Enterprise DevSecOps Reference Design.
• Build automation for Continuous Authority to Operate (cATO) with source control and deployment strategies.
• Embed automated security controls into pipelines.
• Ensure compliance checks meet RMF requirements prior to release.
• Develop modular IaC templates for AWS/Azure on hybrid environments.
• Lead transition of workloads from SIPR/NIPR to GovCloud/Secret and Azure Gov.
• Design migrations with zero mission degradation.

Skills

Security clearance

Hybrid cloud experience

DevSecOps

SAST/DAST tooling

Education

Bachelor's or Master's in CS / SWE / Cybersecurity

Tools

Docker

Kubernetes

GitLab CI/Jenkins

Terraform / CloudFormation

Job description

MTSI is seeking a Senior Cloud Solutions Engineer to join our team at the Missile Defense Agency in Huntsville, Alabama. This role will help a team accelerate the delivery of secure software capabilities to the warfighter. In this critical role, you will architect mission workloads and build the automated DevSecOps pipelines required to deploy them across Impact Level 5 and 6 (IL5/IL6) environments.

About the Program

You will lead the modernization of legacy defense applications, designing cloud-native architectures targeted for AWS GovCloud, Azure Government, and high-side on-premise VMware vSphere data centers. Your primary objective is to implement a "secure by design" software factory that supports Continuous Authority to Operate (cATO) pathways, ensuring that mission-critical code is deployed rapidly, securely, and in strict compliance with DoW cybersecurity mandates.

Core Responsibilities

• Analyze legacy DoW application portfolios and design target-state architectures for IL5/IL6 environments.
• Re-platform workloads using hardened containers (e.g., DoD Iron Bank) and Kubernetes, or re-architect for cloud-native services to enhance mission resilience.
• Architect and implement end-to-end CI/CD pipelines aligned with the DoD Enterprise DevSecOps Reference Design.
• Build the automation framework necessary to support a Continuous Authority to Operate (cATO), integrating source control, build automation, and deployment strategies.
• Embed automated security controls directly into the pipeline.
• Implement SAST/DAST/SCA scanning, automated DISA STIG compliance checks, and Open Policy Agent (OPA) guardrails to ensure all deployments meet Risk Management Framework (RMF) requirements prior to release.
• Develop and enforce modular IaC templates (AWS CloudFormation, Azure ARM, Terraform) to define and provision hybrid mission environments.
• Ensure all infrastructure deployments are version-controlled, repeatable, and peer-reviewed.
• Provide technical leadership for transitioning workloads from legacy on-premise SIPR/NIPR environments to AWS GovCloud/Secret and Azure Government.
• Design the automation to execute migrations with zero mission degradation.

Required Qualifications

• Security Clearance: Must possess an active DoD Secret or Top Secret clearance. (TS/SCI preferred).
• DoD Certification: Must meet DoD 8140/8570 IASAE Level II or III requirements (e.g., CISSP, CASP+, or CISSP-ISSEP).
• Experience: 8 years in IT infrastructure or software engineering, with at least 5 years architecting cloud workloads or building DevSecOps pipelines in federal/DoD environments.
• Hybrid Cloud Expertise: Proven, hands-on experience designing architectures that span AWS GovCloud, Azure Government, and on-premise VMware vSphere environments (vCenter, ESXi, NSX).
• DevSecOps Tooling: Deep practical knowledge of containerization (Docker/Kubernetes), CI/CD orchestration (e.g., GitLab CI, Jenkins), and integrating security scanners (e.g., SonarQube, Fortify, Twistlock).
• IaC Mastery: Extensive experience with AWS CloudFormation and/or Terraform for deploying infrastructure in highly regulated environments.

Preferred Qualifications

• AWS Certified DevOps Engineer - Professional, Azure DevOps Engineer Expert, or CKA (Certified Kubernetes Administrator).
• Strong proficiency in Python, Bash, Typescript, or PowerShell for building complex automation and pipeline glue logic.
• Bachelor’s or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related technical discipline.

#LI-AT1