Company DescriptionTechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs.
Job DescriptionTechSur is seeking a Senior Cloud Engineer who is fluent in both Google Cloud Platform (GCP) and Oracle Cloud Infrastructure (OCI). You will be the program's go-to engineer for both platforms, splitting your time roughly evenly between them. You will build GCP and OCI foundations that match the same enterprise standards the team applies on AWS and Azure.
On GCP, you will establish the organization and folder hierarchy, Shared VPC networking, and organization policies. On OCI, you will build tenancies, compartments, VCN/DRG networking, and Security Zones. On both, you will automate with Infrastructure-as-Code, integrate with the customer's identity, monitoring, and service management tools, and support the platforms in production.
Key Responsibilities
- Design and deploy GCP landing zones: resource hierarchy (organization, folders, projects), Shared VPC hub-and-spoke networking, Cloud Interconnect or HA VPN, and Cloud DNS.
- Design and deploy OCI landing zones: tenancy and compartment structure, VCN and Dynamic Routing Gateway (DRG) hub-and-spoke networking, FastConnect or IPsec VPN, and DNS.
- Build and maintain Terraform modules (including OCI Resource Manager) and GitOps workflows for production, integration, development, and sandbox environments on both platforms.
- Configure IAM and federation with the customer's enterprise identity provider using SAML 2.0 and OIDC, aligned with Zero Trust principles.
- Enforce guardrails with GCP Organization Policy and Security Command Center, and with OCI Cloud Guard and Security Zones, against NIST SP 800-53 Rev 5 and customer security standards.
- Apply the enterprise tagging and labeling strategy for asset management and chargeback/showback using GCP Billing Reports and OCI Cost Analysis.
- Monitor environments with Google Cloud Operations Suite and OCI Monitoring, integrated with Datadog, Splunk, and ServiceNow.
- Perform patching, routine maintenance, capacity planning, and rightsizing; troubleshoot and resolve incidents as part of 24/7 operations support.
- Design and test high availability, backup, and disaster recovery on both platforms.
- Write runbooks and SOPs, supply ATO evidence, and transfer knowledge to customer operations staff.
QualificationsRequired Qualifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
- At least 9 years of experience deploying and configuring cloud environments.
- Hands-on production experience with both Google Cloud Platform and Oracle Cloud Infrastructure.
- Production experience with Infrastructure-as-Code using Terraform on GCP and OCI.
- Experience with cloud network design, including private connectivity (Cloud Interconnect, FastConnect, or IPsec VPN), routing, and DNS.
- Experience implementing IAM and single sign-on federation (SAML 2.0/OIDC).
- Working knowledge of NIST SP 800-53 security controls in a federal environment.
- Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
- Google Cloud Certified Professional Cloud Architect or Professional Cloud Security Engineer.
- Oracle Cloud Infrastructure Architect Professional or OCI Multicloud Architect Professional.
- Experience hosting Oracle Database workloads on OCI (Autonomous Database, Exadata Cloud Service, Base Database Service).
- Experience with GCP Assured Workloads, OCI US Government regions, or FedRAMP Moderate/High environments.
- Experience with GCP Cloud Build/Cloud Deploy or OCI DevOps pipelines.
- Working knowledge of AWS or Azure.
- Prior support of a civilian federal agency.
Additional InformationAll your information will be kept confidential according to EEO guidelines.
