Navteca

• Design, deploy, and manage cloud infrastructure across AWS, Azure, and/or GCP environments • Ensure high availability, scalability, and reliability of cloud-based systems and services • Implement and maintain Infrastructure as Code (IaC) using tools such as Terraform, CloudFormation, or Bicep • Build and optimize CI/CD pipelines to support automated deployments and releases • Monitor system performance and availability using observability tools; proactively resolve incidents and bottlenecks • Lead incident response, root cause analysis, and post-incident reviews • Enforce security best practices, including identity and access management (IAM), encryption, and compliance standards • Optimize cloud costs through resource management, rightsizing, and usage analysis • Collaborate with software engineering, DevOps, and data teams to support application and platform needs • Drive continuous improvement initiatives for operational efficiency and system resilience • Mentor junior engineers and provide technical leadership across teams

• Lead compliance initiatives for cloud-based mission systems across AWS, Azure, and/or GCP environments • Interpret and implement federal cybersecurity frameworks (e.g., NIST 800-53, FedRAMP, FISMA) into actionable controls • Manage Authority to Operate (ATO) processes, including documentation, control validation, and accreditation support • Develop and maintain System Security Plans (SSPs), POA&Ms (Plans of Action & Milestones), and other compliance artifacts • Conduct risk assessments, gap analyses, and continuous monitoring activities • Collaborate with security engineers and cloud teams to ensure proper implementation of technical controls • Coordinate internal and external audits, assessments, and compliance reviews • Track and remediate vulnerabilities in alignment with federal and agency timelines • Establish governance processes, policies, and procedures to support ongoing compliance • Provide guidance on secure cloud architecture and regulatory requirements • Report compliance status, risks, and metrics to leadership and stakeholders • Support data protection, privacy requirements, and system categorization efforts