Zero-Trust AWS Cloud Engineer – DoD GovCloud

Socket.dev; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Nakupuna is seeking an AWS Cloud Engineer with Zero Trust expertise to manage AWS GovCloud environments and Windows Server 2022. The role focuses on secure cloud operations and alignment with DoDIN security posture, guiding DoD customers toward a Zero Trust posture.

Based in Arlington, VA, the position is on-site with some travel and requires Top-Secret clearance. Responsibilities include deploying CDK-based infrastructure, Lambda data pipelines, and implementing least-privilege access within

Qualifications

• Bachelor’s degree in a STEM field or equivalent military/work experience.
• Minimum of 3 years of relevant professional experience in systems administration and cloud operations.
• Active DoD security clearance at Top Secret level required.
• Experience supporting DoD IT environments preferred and familiarity with Agile/JIRA is desirable.

Responsibilities

• Provision and configure AWS services using CDK IaC.
• Provision and configure data and log pipelines using Lambda, Fire Hose, Glue, and related services.
• Write and debug AWS Lambda functions to automate operational and security processes.
• Implement and maintain Zero Trust architecture, including least-privilege access, within AWS environments.

Skills

AWS CDK

Python scripting

High availability systems

DoD IT security

Zero Trust

AWS Lambda

AWS GovCloud

Education

Bachelor's degree in STEM or related field

Tools

AWS Config

Systems Manager

Patch Manager

Job description

Nakupuna is seeking an AWS Cloud Engineer with Zero Trust expertise to manage AWS GovCloud environments and Windows Server 2022. The role focuses on secure cloud operations and alignment with DoDIN security posture, guiding DoD customers toward a Zero Trust posture.

Based in Arlington, VA, the position is on-site with some travel and requires Top-Secret clearance. Responsibilities include deploying CDK-based infrastructure, Lambda data pipelines, and implementing least-privilege access within