SITEC - Cloud Engineer - MacDill

Peraton; Tampa (FL); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Cloud Systems Engineer to support USSOCOM SITEC-3 EOM at MacDill AFB, Florida. The role focuses on designing and sustaining secure cloud platforms across Azure and AWS Gov environments, with emphasis on DevSecOps and compliant operations.

You will implement IaC, manage hybrid cloud workloads, and collaborate with cross-functional teams to ensure 24x7MISSION readiness for critical defense missions.

Qualifications

• Requires DoD TS/SCI clearance and strong cloud security background.
• Extensive hands-on experience with Azure and AWS Gov environments.
• Proven ability to design scalable, secure, compliant cloud platforms.
• DevSecOps and IaC experience required.
• Experience with DISA STIG and NIST controls is a plus.

Responsibilities

• Design and operate cloud platforms with IAM, encryption, and monitoring.
• Build and maintain IaC pipelines using Terraform, Bicep, and CI/CD.
• Harden deployments per DISA STIGs and DoD security requirements.
• Coordinate with USSOCOM stakeholders and vendor teams.
• Provide NetOps and end-user services in SITEC-3 EOM.

Skills

Cloud architecture

Azure

AWS

DevSecOps

Kubernetes

Education

Bachelor's degree in related field

Tools

Terraform

Bicep

ARM templates

Powershell

Job description

Responsibilities

Peraton requires Cloud Systems Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position islocatedatMacDill AFBin Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

SOF Integration Facility (SIF) Team is seeking an experienced and innovative Cloud Systems Engineer to support our USSOCOM’s network enterprise modernization efforts. The ideal candidate will manage, design, and optimize cloud solutions to ensure the availability, security, and performance of mission-critical applications. This role requires a strong technical background, problem-solving skills, and the ability to work independently as well as collaboratively with cross-functional teams. The ideal candidate is detail-oriented, customer-service driven, and eager to grow in a fast-paced IT operations environment.

Designs, engineers, secures, and sustains resilient Microsoft Azure and AWS Government platforms for critical defense missions, implementing DevSecOps within highly regulated Impact Level (IL4/IL5/IL6) enclaves and managing hybrid Linux/Windows workloads. Focus areas include DISA STIG-aligned Infrastructure-as-Code, Zero Trust, automated compliance controls, and secure connectivity to DoD networks.

Duties include but are not limited to:

Cloud Platform Engineering & Operations:

• Build andmaintaincloud‑based platforms/services; support hybrid multi‑cloud operations with strict IAM, encryption, governance, and monitoring/reporting integration.

• Implement solutions with virtualization/containerization (VMware, Docker/Kubernetes/AKS).

• Harden AKS per DISA Container Hardening Guides and apply STIG baselines across Azure resources.

Infrastructure as Code (IaC) & Automation:

• Author and enforce Bicep/Terraform/ARM templates embedding DISA STIG controls "by default."

• Develop automated provisioning usingIaClanguages (e.g., HCL/YAML) and platform APIs/services; script in Python/PowerShell/Bash to automate workflows.

DevSecOps & Continuous Authorization:

• Build CI/CD pipelines in Azure or AWS DevOps/GitHub Actions with integrated security scanning (SAST/DAST) to enable Continuous ATO (cATO).

• Adhere to agile software development and IT service management practices.

Security, Compliance & Governance:

• Implement Azure Policy/Blueprints aligned to DoD Cloud Computing SRG and NIST 800-53 control families;maintainautomated patching and compliance for RHEL/Ubuntu in classified environments.

• Engineer Zero Trust securityin accordance withNIST SP 800-207 (access control, encryption, threat intelligence, vulnerability management, cloud security models/controls).

• Design identity/access using Microsoft Entra ID (Azure AD) and Conditional Access to enforce DoD Zero Trust principles.

Hybrid Connectivity & Enterprise Integration:

• Establish secure connectivity between on-prem DoD networks and Azure/AWS Gov via ExpressRoute and Private Link; integrate interconnectivity with legacy systems.

• Represent USSOCOM in vendor engagements; communicate technical information clearly to enterprise,component, and TSOC stakeholders.

Operations & Mission Support:

• Support NetOps, systems/network sustainment, end‑user/common device services, configuration/change/license/asset management, training, and IMAC activities per SITEC-3 EOM.

Qualifications

Required Qualifications:

• Min 12 years with HS Diploma, 10 years with AS/AA degree, 8 years with BS/BA, or 6 years with MS/MA, 3 years with PhD

• Active DoD TS/SCI clearance

• DoD 8570 IAT II Certification

• Minimum 3 years directly in Microsoft Azure or AWS Government with deep knowledge of IL distinctions

Desired Qualifications:

• Must be DoW 8140 compliant under the Work Role Code 451 - System Administrator - Intermediate level or higher by 1 Oct 26.

• Azure Solutions Architect Expert (AZ-305)

• Azure Administrator Associate

• Azure Security Engineer Associate (AZ-500)

• AWS Certified Solutions Architect Professional

• AWS Certified Solutions Architect Associate

• CCSP

• Cloud+

• GIAC GCLD/GCSA

• Mobile Device Management experience (MaaS360, Intune)

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.