Senior Cloud Network Engineer

Job Description

Everforth ECS is seeking a Senior Cloud Network Engineer to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax . Please Note: This position is contingent upon contract award.

The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.

The Senior Cloud Network Engineer is an experienced cloud networking professional responsible for designing, implementing, and sustaining the advanced network architectures that interconnect WDP Core Integration cloud environments across IL2/NIPRNet, IL5/AWS GovCloud, IL6/AWS Secret Region, and JWICS, ensuring secure, reliable, and high-performance connectivity for mission-critical DoW operations. Working in close coordination with the Cloud Engineer SME, IaC engineers, cybersecurity personnel, and platform operations teams, this role delivers the routing integrity, cross-domain transport assurance, and network operational discipline required to sustain multi-enclave enterprise cloud infrastructure at the speed and scale the DoW's AI-First mission demands.
Develops, architects, and administers advanced cloud network infrastructures supporting Department of War missions, multi-enclave operations, and cross-domain transport requirements.
Designs and manages transit gateways, virtual private clouds, subnet architectures, boundary routing, Domain Name System structures, and network segmentation aligned with operational and security standards for classified and unclassified enclaves.
Configures Internet Protocol Address Management systems, virtual private network connections, Gateway Load Balancers, and VPC Endpoints supporting distributed War Data Platform (WDP) Core Integration cloud operations.
Conducts packet analysis, routing diagnostics, latency assessments, and Domain Name System trace evaluations using tools such as CloudWatch, CloudTrail, VPC Flow Logs, and advanced network analyzers.
Produces enterprise network architecture diagrams, routing tables, capacity forecasts, and configuration baselines supporting system operations documentation.
Leads incident investigations for network degradations and coordinates resolution actions with cloud engineers, cybersecurity personnel, and mission operators.
Implements secure routing methodologies, encryption standards, and traffic filtering aligned with operational requirements.
Develops operational procedures supporting system availability, network hardening, and cross-domain data movement.
Provides technical leadership by guiding junior engineers through complex routing scenarios, diagnostic workflows, and network optimization strategies.
Contributes to operational readiness by maintaining comprehensive network configuration records, performance dashboards, and audit-traceable artifacts.
Delivers measurable mission outcomes through reduced latency, improved routing efficiency, and sustained network integrity across multi-region environments supporting Department of War stakeholders.
Performs other duties as assigned.

Required Skills

Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI).
10-12 years of progressively responsible experience in cloud network engineering, enterprise network architecture, or a closely related field, with demonstrated proficiency designing, deploying, and sustaining secure network infrastructures in support of DoW or federal government programs operating across multiple security enclaves.
Expert hands-on proficiency with AWS cloud networking services including Transit Gateway, VPC architecture, subnet design, IAM-integrated boundary controls, VPC Flow Logs, CloudWatch, and CloudTrail, combined with demonstrated experience managing these capabilities across IL5/AWS GovCloud, IL6/AWS Secret Region, and JWICS environments.
Demonstrated experience configuring and administering IPAM systems, VPN connections, Gateway Load Balancers, VPC Endpoints, and DNS architectures in multi-enclave DoW-compliant environments, including cross-domain transport and boundary protection implementations aligned with applicable security requirements.
Proven ability to perform advanced network diagnostics including packet analysis, routing trace evaluation, latency profiling, and DNS troubleshooting, and to lead incident resolution activities with cloud engineers, cybersecurity personnel, and platform operations teams across classified and unclassified environments.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Desired Skills

Active Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility.
AWS Advanced Networking Specialty, AWS Solutions Architect (Associate or Professional), or an equivalent advanced cloud networking certification; a DoW 8140/8570-compliant cybersecurity credential such as CompTIA Security+ is also highly valued.
Prior experience supporting cloud network engineering on DoW, intelligence community, or defense programs, including familiarity with DoW cloud reference architectures, F5 BigIP or Palo Alto NGFW boundary configurations, hybrid networking, and cross-domain solution integration spanning NIPRNet, SIPRNet, and JWICS.
Familiarity with Infrastructure-as-Code tools such as Terraform or CloudFormation applied to network resource provisioning, including automated configuration baseline enforcement, compliance drift detection, and integration with DevSecOps CI/CD pipelines across multi-enclave environments.
Bachelor's degree in Computer Science, Network Engineering, Information Technology, Systems Engineering, or a closely related technical field.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven