USAF - Cloud Engineer

cFocus Software Incorporated; Linthicum (MD); On-site; USD 140,000 - 180,000; Full time

Job summary

cFocus Software seeks a Cloud Engineer for an on-site role in Linthicum Heights, MD, supporting USAF with an active TS/SCI clearance. You will implement and maintain cloud and hybrid infrastructure, develop Infrastructure as Code, and drive secure DevSecOps practices across multiple environments.

The role requires provisioning cloud/virtual servers, integrating on-premises systems, and maintaining monitoring and compliance artifacts for RMF/ATO activities.

Qualifications

• Active TS/SCI clearance required.
• B.S. Computer Science, IT, or related field.
• Experience implementing and operating cloud or hybrid infrastructure.
• Ability to provision and manage cloud/virtual servers and configurations.
• Experience with IaC, CAC, scripting, and CI/CD workflows.
• Knowledge of cloud security controls, logging, and vulnerability remediation.
• Support RMF/ATO activities and STIG implementation.

Responsibilities

• Implement and maintain cloud/hybrid infrastructure per enterprise architecture and DevSecOps processes.
• Provision cloud/virtual servers and integrate with on-premises systems.
• Develop and maintain Infrastructure as Code and Configuration as Code.
• Create and maintain CI/CD pipelines for infra and apps with automated security controls.
• Configure monitoring, logging, and alerts across cloud resources and ATO boundaries.
• Assist with cross-domain solutions and government reviews as required.
• Document designs and as-built environments for authorization boundaries.
• Support vulnerability scans, remediation, and patching with cybersecurity teams.
• Provide technical evidence and monitoring data for RMF/ATO processes.

Skills

Active TS/SCI clearance

Cloud infrastructure

Hybrid infrastructure

DevSecOps

Infrastructure as Code

Education

B.S. Computer Science or related field

Tools

CI/CD pipelines

Configuration as Code

Infrastructure as Code

Job description

cFocus Software seeks a Cloud Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience implementing and operating enterprise cloud or hybrid infrastructure and integrating cloud services with on-premises systems.
• Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
• Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
• Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
• Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
• Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.

Duties:

• Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
• Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
• Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
• Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
• Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
• Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
• Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
• Automate Security Technical Implementation Guides (STIGs), system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
• Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
• Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
• Provide technical evidence, documentation, and continuous monitoring data supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
• Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
• Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
• Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
• Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.