Senior Cloud Solutions Engineer

Modern Technology Solutions, Inc. (MTSI); Huntsville (AL); On-site; USD 140,000 - 190,000; Full time

Job summary

Modern Technology Solutions, Inc. (MTSI) in Huntsville, Alabama, seeks a Senior Cloud Solutions Engineer to accelerate secure software delivery for the warfighter.

You will architect mission workloads and build automated DevSecOps pipelines for IL5/IL6 environments, creating a secure-by-design software factory with cATO readiness. You will modernize legacy DoD apps, designing cloud-native architectures for AWS GovCloud and Azure Government while enforcing RMF security and integrating

Qualifications

• Active DoD Secret or Top Secret clearance (TS/SCI preferred).
• DoD 8140/8570 IASAE Level II or III certification (e.g., CISSP, CASP+, CISSP-ISSEP).

Responsibilities

• Analyze legacy DoD applications and design IL5/IL6 target-state architectures with hardened containers and Kubernetes.
• Architect and implement end-to-end CI/CD pipelines and a framework supporting a Continuous Authority to Operate (cATO).
• Embed automated security controls into pipelines with SAST/DAST/SCA, DISA STIG checks, and OPA guardrails.
• Develop modular IaC templates (CloudFormation, Terraform) for repeatable, version-controlled deployments.
• Lead migration of workloads from on-prem SIPR/NIPR to AWS GovCloud/Secret and Azure Government with zero mission degradation.

Skills

Cloud security

DevSecOps

CI/CD

Hybrid cloud

Education

Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity

Tools

Docker

Kubernetes

GitLab CI

Jenkins

SonarQube

Fortify

Twistlock

AWS CloudFormation

Terraform

Azure ARM

Job description

MTSI is seeking a Senior Cloud Solutions Engineer to join our team at the Missile Defense Agency in Huntsville, Alabama. This role will help a team accelerate the delivery of secure software capabilities to the warfighter. In this critical role, you will architect mission workloads and build the automated DevSecOps pipelines required to deploy them across Impact Level 5 and 6 (IL5/IL6) environments.

About The Program

You will lead the modernization of legacy defense applications, designing cloud-native architectures targeted for AWS GovCloud, Azure Government, and high-side on-premise VMware vSphere data centers. Your primary objective is to implement a "secure by design" software factory that supports Continuous Authority to Operate (cATO) pathways, ensuring that mission-critical code is deployed rapidly, securely, and in strict compliance with DoW cybersecurity mandates.

Core Responsibilities

• Analyze legacy DoW application portfolios and design target-state architectures for IL5/IL6 environments. Re-platform workloads using hardened containers (e.g., DoD Iron Bank) and Kubernetes, or re-architect for cloud-native services to enhance mission resilience.
• Architect and implement end-to-end CI/CD pipelines aligned with the DoD Enterprise DevSecOps Reference Design. Build the automation framework necessary to support a Continuous Authority to Operate (cATO), integrating source control, build automation, and deployment strategies.
• Embed automated security controls directly into the pipeline. Implement SAST/DAST/SCA scanning, automated DISA STIG compliance checks, and Open Policy Agent (OPA) guardrails to ensure all deployments meet Risk Management Framework (RMF) requirements prior to release.
• Develop and enforce modular IaC templates (AWS CloudFormation, Azure ARM, Terraform) to define and provision hybrid mission environments. Ensure all infrastructure deployments are version-controlled, repeatable, and peer-reviewed.
• Provide technical leadership for transitioning workloads from legacy on-premise SIPR/NIPR environments to AWS GovCloud/Secret and Azure Government. Design the automation to execute migrations with zero mission degradation.

Required Qualifications

• Security Clearance: Must possess an active DoD Secret or Top Secret clearance. (TS/SCI preferred).
• DoD Certification: Must meet DoD 8140/8570 IASAE Level II or III requirements (e.g., CISSP, CASP+, or CISSP-ISSEP).

Experience

• 8 years in IT infrastructure or software engineering, with at least 5 years architecting cloud workloads or building DevSecOps pipelines in federal/DoD environments.
• Hybrid Cloud Expertise: Proven, hands-on experience designing architectures that span AWS GovCloud, Azure Government, and on-premise VMware vSphere environments (vCenter, ESXi, NSX).
• DevSecOps Tooling: Deep practical knowledge of containerization (Docker/Kubernetes), CI/CD orchestration (e.g., GitLab CI, Jenkins), and integrating security scanners (e.g., SonarQube, Fortify, Twistlock).
• IaC Mastery: Extensive experience with AWS CloudFormation and/or Terraform for deploying infrastructure in highly regulated environments.

Preferred Qualifications

• AWS Certified DevOps Engineer - Professional, Azure DevOps Engineer Expert, or CKA (Certified Kubernetes Administrator).
• Strong proficiency in Python, Bash, Typescript, or PowerShell for building complex automation and pipeline glue logic.
• Bachelor’s or Master's degree in Computer Science, Software Engineering, Cybersecurity, or a related technical discipline.