The Cloud Engineer - Journeyman designs, engineers, and integrates secure, scalable multi-cloud and hybrid cloud infrastructures that underpin mission-critical enterprise systems in highly regulated government environments. The role focuses on implementing Infrastructure as Code, cloud automation, and governance controls to standardize provisioning, enforce guardrails, and maintain compliant operations across major public cloud platforms. The engineer collaborates with security, networking, and application teams to modernize legacy workloads, improve observability and disaster recovery, and document architectures and operational patterns for ongoing support.
Key Responsibilities- Design and implement multi-cloud and hybrid cloud architectures across major public cloud platforms to support enterprise workloads with strong emphasis on security, reliability, and cost efficiency.
- Build and maintain Infrastructure as Code (IaC) solutions using tools such as Terraform, CloudFormation, ARM templates, and automation pipelines to standardize and automate cloud resource provisioning.
- Engineer cloud networking constructs including virtual networks/VPCs, subnets, routing, peering, and secure connectivity (VPN, Direct Connect, ExpressRoute) integrated with on-premises enterprise networks.
- Configure and manage cloud security services and controls such as IAM, security groups, key management, configuration monitoring, and threat detection to align with government security and cloud governance requirements.
- Implement cloud monitoring, logging, and observability solutions (e.g., CloudWatch, Azure Monitor, Stackdriver, Elastic, Splunk) to provide operational visibility, detect anomalies, and support incident response activities.
- Optimize cloud resource utilization through rightsizing, scaling policies, use of reserved and spot instances, and performance tuning to manage spend while meeting service level objectives.
- Design and test disaster recovery and business continuity strategies for cloud workloads, including backup, replication, multi-region architectures, and documented recovery playbooks for mission-critical systems.
- Support DevOps practices by integrating CI/CD pipelines with cloud platforms, container orchestration tools, and configuration management solutions to streamline deployments and reduce operational risk.
Required Qualifications- Bachelor's degree in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field; equivalent experience may be considered.
- Approximately 4-7 years of hands-on experience in cloud engineering, automation, and security within enterprise or government environments, including multi-cloud or hybrid architectures.
- Experience implementing Infrastructure as Code using tools such as Terraform, CloudFormation, or ARM templates and supporting automated deployment pipelines.
- Demonstrated experience configuring and managing cloud networking, identity and access management, and security controls in at least one major public cloud provider.
- Experience implementing and operating cloud monitoring and logging solutions and supporting incident response in production environments.
- Must hold an active Secret clearance and meet applicable DoD 8140 requirements.
Preferred Qualifications- AWS Certified Solutions Architect or AWS Certified DevOps Engineer.
- Microsoft Azure Solutions Architect Expert or Azure Administrator Associate certification.
- Experience with containerization and orchestration technologies such as Docker and Kubernetes in production cloud environments.
- Experience working in federal or other highly regulated enterprise IT environments with formal cloud governance frameworks.
Compensation RangesCompensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.
EEO RequirementsIt is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.
All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.
Physical Requirements
The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.
DisclaimerThe preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
Never miss an opportunity! Create an alert based on the job you applied for.