Sr Federal Cloud & Network Infra Engineer (AWS EKS)

Everforth ECS; Arlington (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Everforth ECS seeks a Senior Infrastructure Engineer to design, build, and operate secure AWS environments (FedRAMP/ATO governed). You will own infrastructure across GovCloud and commercial accounts, focusing on EKS, Terraform, DNS, and connectivity.

The role requires hands-on AWS engineering, strong automation discipline, and collaboration with Security and Application teams to ensure compliance and production readiness.

Qualifications

• Bachelor's degree or 8 years of relevant experience.
• 6+ years designing, implementing, securing, and maintaining AWS Cloud infrastructure.
• 5+ years troubleshooting hybrid/cloud network connectivity (VPC routing, TGW, DNS, DHCP, TLS/certificates, SGs, NACLs).
• 5+ years with Terraform (advanced modules, state management, policy enforcement).
• 5+ years Kubernetes networking, ingress, CoreDNS, and connectivity between EKS workloads and AWS/external services.
• 5+ years infrastructure experience related to network security and secure cloud operations.
• Experience in security compliance environments (FedRAMP, FISMA, NIST 800-53) and RMF/ATO documentation.

Responsibilities

• Troubleshoot and support enterprise load-balancing and ingress patterns (F5, DNS, TLS, routing).
• Coordinate with application teams, Security, stakeholders, and program leadership to resolve connectivity and production readiness issues.
• Design, build, and maintain Infrastructure-as-Code using Terraform (modules, remote state, policy integration).
• Provision, upgrade, and manage EKS clusters, namespaces, and Helm add-ons; manage IAM roles for service accounts.
• Configure AWS VPC networking, including routing, TGWs, DNS, DHCP, endpoints, NACLs, and security groups.
• Implement and secure microservices on EKS with connectivity to S3, ECR, Secrets Manager, IAM.
• Automate deployments with GitHub Actions or self-hosted runners; manage cross-account IAM role assumptions and CI/CD policy gates.
• Enforce least-privilege IAM, automate compliance evidence collection, and support RMF/ATO documentation.
• Diagnose issues across containers, Kubernetes networking, and AWS layers (VPC–security).
• Support observability, logging, and monitoring with Elastic, ScienceLogic, or AppDynamics to meet SLA and audit requirements.
• Mentor junior engineers and drive process standardization and knowledge sharing.
• Develop SOPs and playbooks aligned with program governance; improve design for resiliency and policy compliance.
• Support legacy-to-CAWS migrations, including connectivity, cutover, and validation of network paths.

Skills

Strong communication

Security compliance

Cross-team collaboration

Automation and IaC

Operational discipline

Problem solving

Education

Bachelor's degree or 8 years relevant experience

Tools

Terraform

AWS

EKS

Kubernetes

GitHub Actions

NIST/FedRAMP controls

Job description

Everforth ECS seeks a Senior Infrastructure Engineer to design, build, and operate secure AWS environments (FedRAMP/ATO governed). You will own infrastructure across GovCloud and commercial accounts, focusing on EKS, Terraform, DNS, and connectivity.

The role requires hands-on AWS engineering, strong automation discipline, and collaboration with Security and Application teams to ensure compliance and production readiness.