• Drive AWS cost optimization initiatives across cloud environments • Perform resource rightsizing and utilization analysis • Manage Reserved Instances (RIs) and Savings Plans strategies • Implement cost allocation and tagging frameworks • Monitor AWS Cost Anomaly Detection alerts • Utilize AWS Trusted Advisor and Cost Optimization Hub recommendations • Analyze AWS Cost and Usage Reports (CUR) • Support AWS Organizations and multi-account cost governance

• Diseñar la topología de red y el despliegue sobre la infraestructura AWS del banco (EKS, API Gateway, RDS, ElastiCache Redis, KMS). • Liderar el diseño, definición y auditoría de los scripts de Terraform (IaC) requeridos para el aprovisionamiento automatizado de los ambientes de Desarrollo, UAT y Producción en la cuenta AWS del banco, asumiendo la responsabilidad directa de disponibilizar dicha infraestructura. • Garantizar la correcta integración con Integration Suite (Core IBS/SAP), DanaConnect y Dynatrace, asegurando resiliencia del 99.95% y RTO < 15 min.

• The Cloud Engineer is a senior technical role responsible for architecting, implementing, and managing cloud infrastructure supporting U.S. Army IT managed services. • This position bridges legacy on-premises environments with modern cloud-native architectures, ensuring secure, resilient, and cost-effective operations across a hybrid IT landscape. • Design, deploy, and manage cloud infrastructure on FedRAMP-authorized platforms (AWS GovCloud, Microsoft Azure Government, Google Cloud for Government) supporting Army workloads. • Lead technical execution of cloud migration efforts including workload assessment, lift-and-shift operations, re-platforming, and cloud-native refactoring. • Support on-premises infrastructure environments including servers, storage, networking, and virtualization platforms (VMware, Hyper-V) as part of hybrid cloud operations. • Develop and enforce cloud governance policies covering IAM, resource provisioning guardrails, tagging standards, and cost controls. • Implement Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, Azure Bicep, or equivalent tools to automate provisioning and configuration management. • Maintain high availability, disaster recovery (DR), and business continuity plans (BCP) for both cloud and data center environments. • Oversee hybrid network connectivity including SD-WAN, AWS Direct Connect, Azure ExpressRoute, and VPN solutions between on-premises and cloud environments. • Monitor infrastructure performance and security posture using tools such as CloudWatch, Azure Monitor, Splunk, or similar SIEM/observability platforms. • Collaborate with cybersecurity teams to implement NIST 800-53 controls, continuous monitoring (ConMon), RMF processes, and FedRAMP compliance requirements. • Support FinOps practices including cloud cost analysis, rightsizing recommendations, and budget reporting for reimbursable IT programs. • Provide technical documentation including architecture diagrams, runbooks, migration playbooks, and system security plans (SSPs). • Mentor junior engineers and contribute to workforce upskilling as the organization transitions to cloud-first operations.

• Design, implement, and sustain enterprise network architectures across on-premises, hybrid, AWS, and Azure cloud environments • Lead network engineering efforts through the full system lifecycle, including planning, design, implementation, testing, deployment, accreditation, and sustainment • Serve as the senior technical authority (SME) for routing, switching, network security, secure communications, firewall architecture, and cloud networking design • Engineer and maintain AWS and Azure cloud networking components, including VPCs, VNets, subnets, route tables, transit gateways, virtual WAN, ExpressRoute, Direct Connect, VPN gateways, peering, private endpoints, security groups, NSGs, load balancers, DNS services, NAT gateways, and hybrid interconnections • Develop and enforce network standards, security baselines, firewall policies, segmentation strategies, access control requirements, and cloud network governance • Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and Army 8140 requirements for privileged administrative access • Analyze, document, and optimize end-to-end traffic flows across enterprise, tactical, and cloud environments to ensure secure routing, performance, resiliency, and mission effectiveness • Provide technical oversight for DevSecOps and Infrastructure as Code (IaC) implementations supporting network automation and cloud network provisioning • Lead advanced troubleshooting and root cause analysis for complex network, firewall, routing, latency, packet loss, and connectivity issues across multi-domain environments • Support Authority to Operate (ATO) activities, including documentation, testing, remediation, and security validation