Role Description At PNNL, our core capabilities are divided among major departments that we refer to as Directorates within the Lab, focused on a specific area of scientific research or other function, with its own leadership team and dedicated budget. The Physical and Computational Sciences Directorate's (PCSD’s) strengths in experimental, computational, and theoretical chemistry and materials science, together with our advanced computing, applied mathematics and data science capabilities, are central to the discovery mission we embrace at PNNL. The Advanced Computing, Mathematics, and Data Division (ACMDD) focuses on basic and applied computing research encompassing: - Artificial intelligence - Applied mathematics - Computing technologies - Data and computational engineering Responsibilities include: - Realizing the potential for science to leverage on-demand cloud scaling and resource diversity. - Controlling and managing costs related to job orchestration. - Requesting SLO constraints with respect to a job’s cost. - Scheduling task parallelism, managing data objects, selecting compute instances, and assigning storage resources. - Tracking costs and ensuring they stay within budgets. Relevant research topics include: - Developing job resource telemetry, cost introspection, modeling, and prediction. - Cross-platform job control mechanisms for alerts, checkpointing, and hard stops. - Optimized job execution policies adapted to cost profiles. The successful applicant will work within the Future Computing Technologies group and have demonstrated expertise in a topic closely related to performance modeling and scientific workloads. The researcher should be creative, self-motivated, and ready to publish at top-tier venues. Qualifications - Currently enrolled/matriculated in a PhD program at an accredited college. - Minimum GPA of 3.0 is required. - Pursuing a degree in computer science, data science, or related field (preferred). - Familiar with topics such as distributed and continuum computing, vector databases, performance modeling, storage and memory systems, etc. (preferred). Requirements - Not Applicable for Hazardous Working Conditions/Environment. - This is not a Testing Designated Position (TDP). Benefits - Health insurance - Flexible work schedules - Employee assistance program - Business travel insurance - Company funded pension plan and 401k savings plan (for regular hourly employees) Company Description Pacific Northwest National Laboratory (PNNL) is a world-class research institution powered by a highly educated, diverse workforce committed to the values of Integrity, Creativity, Collaboration, Impact, and Courage. Every year, scores of dynamic, driven people come to PNNL to work with renowned researchers on meaningful science, innovations and outcomes for the U.S. Department of Energy and other sponsors. PNNL is located in eastern Washington State, known for its stellar outdoor recreation and affordable cost of living.

Job Title: AWS Cloud Engineer III Location: Remote (EST Hours) Job#: 3034307 Length: 6 months Pay Range: $69-$78 Job Description: Company Overview A major financial institution is seeking an experienced AWS Cloud Platform Engineer to support its enterprise AWS environment. The Cloud Engineering team is responsible for designing, operating, and securing the enterprise AWS cloud platform - managing 100+ AWS accounts, 250+ serverless functions, and a comprehensive infrastructure-as-code ecosystem that supports the institution's digital transformation and regulatory compliance objectives. Position Summary The AWS Cloud Engineering III role is a hands-on technical position focused on day-to-day cloud platform operations including AWS account lifecycle management, infrastructure provisioning, VPC networking, security controls enforcement, and operational support. The ideal candidate is a seasoned cloud engineer who thrives in a regulated enterprise environment and can independently execute complex infrastructure tasks while adhering to strict change management and compliance requirements. Duties and Responsibilities Infrastructure Operations & Account Lifecycle - Provision and manage AWS accounts, services, and decommissioning within AWS Organizations - Perform VPC provisioning, upgrades, and configuration management using Terraform - Manage Transit Gateway attachments, route table configurations, and cross-account network connectivity - Support compute infrastructure including EC2 fleet management, Auto Scaling Groups, and load balancer configurations - Fulfill infrastructure change requests through ITSM processes and formal change management Infrastructure as Code (IaC) - Develop, maintain, and troubleshoot Terraform configurations for AWS infrastructure provisioning - Work within Terraform Cloud workspaces with policy-as-code enforcement - Leverage and contribute to internal Terraform modules, guardrails and standardized workflows Security & Compliance - Implement and maintain Service Control Policies (SCPs), IAM policies and least privilege access models - Enforce encryption and data protection standards (EBS, RDS, S3, KMS) - Triage and remediate findings from cloud security posture management (CSPM) tools, vulnerability scans, and drift detection - Manage VPC endpoint configurations, PrivateLink connectivity, and network security controls Monitoring, Cost Management & Operational Support - Monitor and respond to alarms, security findings, and AWS Config rule violations - Support FinOps practices including cost/budget monitoring and enforcement, and resource optimization recommendations - Participate in on-call rotation for cloud platform support - Collaborate with application teams, security, and enterprise architecture stakeholders Documentation & Knowledge Management - Maintain operational runbooks, SOPs, and technical documentation - Document infrastructure decisions, configurations, troubleshooting procedures, and customer support guides Minimum Knowledge, Skills, and Abilities Required Required Experience (Must-Haves) - 5 - 10 years of hands-on experience in cloud infrastructure engineering (AWS-focused) - Demonstrated experience with Terraform (HCL) and IaC lifecycle management - Deep working knowledge of AWS core services: VPC, EC2, Lambda, S3, RDS, IAM, KMS, CloudWatch, CloudTrail, Route 53, API Gateway, ELB (ALB/NLB), Transit Gateway - Experience operating multi-account AWS environments using AWS Organizations and SCPs - Proficiency in IAM policy design, cross-account access patterns, and least-privilege principles - Experience with CI/CD pipelines (Terraform Cloud, Jenkins, GitHub Actions, or equivalent) - Experience with Git-based workflows (branching strategies, pull requests, code reviews) in GitHub Enterprise or similar - Experience working in regulated or enterprise environments with formal change management (ServiceNow or equivalent ITSM) - Strong troubleshooting and problem-solving skills for complex, multi-account AWS environments - Excellent written and verbal communication skills; ability to produce clear technical documentation EEO Employer Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178. Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico. Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide. Employee Type: Contract Remote: Yes Location: Virtual, MI, US Job Type: Infrastructure and Security Pay Range: $69 - $78 per hour

• Design, deploy, and operate AWS infrastructure across multiple accounts and environments • Build and maintain Infrastructure as Code — Terraform modules, pipelines, drift detection • Own identity and access: SSO integration, Keycloak realms, IdP federation, RBAC • Operate HashiCorp Vault for secrets management — policies, auth methods, dynamic credentials, rotation • Build and maintain the observability stack — Prometheus, Grafana, dashboards, alerting • Implement landing zones, account vending, networking, and guardrails • Partner with security and SRE on compliance, hardening, and incident response • Automate operational work — provisioning, access reviews, certificate and secret rotation • Document architecture, runbooks, and onboarding guides • Participate in on-call rotation for platform services

• The Cloud Platform Engineer is the technical owner of the cloud landing zone estate and the workload subscriptions and accounts that sit on top of it. • The role builds, maintains, and evolves the Infrastructure as Code that provisions every shared platform service, every governance control, and every workload landing zone across the global cloud footprint. • This role sits at the foundation of the global transformation programme. • Move away from manual portal builds and route all change through the repository, the pipeline, and the policy engine. • Operate Azure as the strategic primary platform, while also covering AWS as the secondary platform where workloads remain or where workload teams have selected AWS for technical reasons. • Support workload onboarding including Kubernetes hosted machine learning and optimization platforms with Cosmos DB, Azure Files, Azure Blob Storage, and Application Gateway integration.