Cloud Engineer

About the role

• Job Family: IT Architecture/Cloud
• Travel Required: None
• Clearance Required: Active Top Secret (TS)

What You Will Do

Supporting a premier law enforcement agency, the Cloud Engineer owns the MREF cloud platform architecture, infrastructure build, monitoring solution, and DevSecOps infrastructure. Designs for near-zero downtime, maximizes use of the clients Cloud Services and clients Enterprise Developer Services, and drives cloud cost reduction..

• Maximize virtualization and containerization, emphasizing PaaS over IaaS, and maximizing use of FCS and FEDS managed services.
• Design, document, test, and implement the MREF Architecture Design Report optimizing for performance, availability, security, scalability, disaster recovery, and real-time or near real-time data integration across classified and unclassified networks.
• Design to a 4-hour Recovery Time Objective and a 4-hour Recovery Point Objective, propose data replication methods to achieve them, and describe how both will be demonstrated; pursue near-zero downtime for patch and release deployment.
• Propose and implement the MREF Implementation Plan and the monitoring solution recording SLA compliance in near real time at approximately a 5-minute delay, including the automated dashboard retaining at least 15 months of uptime history; review metrics monthly and deliver a performance optimization plan.
• Design, document, and implement the DevSecOps solution covering build and CI/CD tooling, with documentation captured in Confluence or an ATS-approved equivalent; periodically reassess the approach against emerging client platform offerings and present findings to government leads.
• Maintain and update the IaC solution to produce a rapid, flexible, automated build of a consistent, secure, and compliant environment, and identify all dependencies, licenses, and subscription costs.
• Deliver the detailed as-built system architecture, including network diagrams, NACLs and security groups, IAM policies and roles, OS configurations, logical and data flow diagrams covering low/high transfers, authentication flows, CI/CD pipelines, Splunk logging configuration, and health monitoring.
• Provide FCS with the specification of required services, architectural specification, and supporting documentation needed for account and resource provisioning.
• Propose the tagging and labeling strategy and track and project cloud costs; identify, propose, and implement methods to reduce cloud infrastructure cost.
• Incorporate cloud-native technologies and tools aimed at improving agility, lowering cost, and maximizing automation of system administration tasks.
• Perform regular and urgent STIG and vulnerability assessments across FIT and MREF, implement remediation per approved POA&M timelines, and provide status and results to the ISSO.
• Support the ISSO and ISSM in obtaining and maintaining the FIT and MREF ATO, including preparation of security documentation updates and participation in continuous monitoring activities.
• Ensure the application and infrastructure adhere to and satisfy all existing and future client security requirements, developed and maintained in accordance with policy guides, department policy, and applicable Executive Orders.
• Abide by licensing agreements and maintain the license tracker report accounting for government-procured licenses, license types, and copies in use across all environments.
• Maintain and support the cloud infrastructure in sustainment.

What You Will Need

• EIGHT (8) years of infrastructure or platform engineering experience, including FOUR (4) years with Red Hat OpenShift or Kubernetes and THREE (3) years supporting Federal systems in an accredited environment.
• Bachelor's degree (FOUR (4) additional years of relevant experience may be substituted for formal education).
• US Citizenship is required.
• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance

What Would Be Nice To Have

• Red Hat OpenShift architecture, operators, storage classes, and network policy; containerization of enterprise application components.
• Cloud-native PaaS architecture and managed service selection; IaC automation frameworks.
• DevSecOps pipeline design, CI/CD architecture, and artifact management.
• Monitoring and observability design, including SLA instrumentation, Splunk, and uptime dashboarding.
• STIG hardening, vulnerability remediation, and security authorization support.
• Cloud cost management, tagging strategy, and infrastructure cost optimization.
• Red Hat Certified Architect or Certified Specialist in OpenShift Administration; CISSP.

Pay and benefits

The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus