USAF - Cloud Engineer

cFocus Software Incorporated; United States; On-site; USD 120,000 - 150,000; Full time

Job summary

cFocus Software Incorporated seeks a Cloud Engineer to join our program supporting the United States Air Force. This position is on-site in Linthicum Heights, MD.

The role requires an Active TS/SCI clearance and hands-on experience building and operating enterprise cloud or hybrid infrastructure, IaC, scripting, and CI/CD. You will implement security controls and work with Gov teams to achieve RMF/ATO readiness.

Qualifications

• Active TS/SCI clearance.
• BS in Computer Science, Information Technology, or a related field.
• Experience implementing and operating enterprise cloud or hybrid infrastructure.
• Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
• Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
• Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
• Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
• Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.

Responsibilities

• Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
• Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
• Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
• Create and maintain CI/CD pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
• Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
• Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
• Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
• Automate STIGs, system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
• Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
• Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
• Provide technical evidence, documentation, and continuous monitoring data supporting RMF assessments and Authorization to Operate or continuous ATO activities.
• Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
• Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
• Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
• Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.

Skills

Active TS/SCI clearance

Cloud infrastructure experience

CI/CD workflows

Education

BS in Computer Science/IT or related field

Tools

Infrastructure as Code

Configuration as Code

Scripting

CI/CD tooling

Job description

cFocus Software seeks a Cloud Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• - Active TS/SCI clearance
• - B.S. Computer Science, Information Technology, or a related field
• - Experience implementing and operating enterprise cloud or hybrid infrastructure and integrating cloud services with on-premises systems.
• - Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
• - Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
• - Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
• - Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
• - Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.

Duties:

• - Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
• - Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
• - Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
• - Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
• - Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
• - Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
• - Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
• - Automate Security Technical Implementation Guides (STIGs), system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
• - Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
• - Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
• - Provide technical evidence, documentation, and continuous monitoring data supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
• - Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
• - Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
• - Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
• - Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.