READY NEVER WAITS
Senior Cloud Infrastructure Engineer
Location
United States
Posted
10 days ago
Salary
0
Seniority
Senior
Job Description
Senior Cloud Infrastructure Engineer
By Light Professional IT Services
• Support the design and maintain landing zones using cloud applications such as AWS Organizations, Control Tower, SCP guardrails, Identity and Access Management (IAM) multi-account patterns, and VPC architectures (Transit Gateway, PrivateLink, NAT, IGW) for enclave isolation and cross-domain needs. • Engineer high-availability, multi-Region solutions leveraging cloud tools such as EC2, EKS/ECS Fargate, RDS/Aurora, DynamoDB, S3/EFS/FSx, Load Balancers, Route 53, and API Gateway. • Implement Zero Trust-aligned patterns (micro-segmentation, strong identity, continuous verification) consistent with DoD Zero Trust guidance. • Implement security controls and evidence generation for RMF ATO packages (SSP, SAR, POA&M) in coordination with cybersecurity teams. • Apply DISA STIGs (OS, DB, Kubernetes, Container) and SRG requirements for workloads at IL2–IL6. • Tailor and automate STIG application using IaC and configuration management. • Integrate encryption and key management with cloud tools such as AWS KMS/HSM; enforce IAM least privilege, SCPs, permission boundaries, ABAC, and robust secrets management. • Implement cloud logging and metrics tools such as CloudTrail/CloudWatch/GuardDuty/Config for comprehensive audit and detection. • Align architectures with FedRAMP Moderate/High baselines when required and ensure boundary compliance for controlled workloads. • Develop secure connectivity (AWS Direct Connect/VPN), hybrid routing, and segmentation; implement TLS mutual auth, certificate management, and private service endpoints. • Design logging and telemetry pipelines (CloudWatch, OpenTelemetry, Kinesis, S3, SIEM integration such as Splunk/ELK) with retention, metadata/tagging, and data lifecycle policies. • Own SLOs/SLAs for platform services. • Implement autoscaling, health checks, and proactive capacity management. • Lead cost management and alerting practices of cloud environments in coordination with project leads. • Provide Tier 3 support, on-call rotations during exercises, and incident response coordination with cybersecurity and training operations. • Collaborate with agile teams and product owners to translate training requirements into platform capabilities. • Provide mentorship for junior engineers. • Establish standards, design reviews, and repeatable processes. • Present cloud solutions to project leadership and accreditation authorities.
Job Requirements
- Bachelor’s degree in a related technical discipline such as computer science or information technology from an accredited college or university.
- 8–12+ years of experience in cloud/platform engineering with at least 5 years focused on Amazon Web Services (AWS) with a demonstrated leadership delivering secure, scalable, production-grade cloud-based systems.
- DoD 8570/8140 compliance: IAT II (Security+) required; IAT III/CISSP or CASP+ preferred
- AWS Certifications: Certified Solutions Architect – Professional, Security – Specialty, and/or DevOps Engineer – Professional.
- Kubernetes certifications: CKA/CKS.
- Experience with HashiCorp Vault, Service Mesh (Istio), policy-as-code (OPA), and zero trust implementations in government environments.
- Infrastructure-as-code mastery (Terraform and/or CloudFormation), pipelines (GitLab/Jenkins), and configuration management (Ansible/Chef).
- Deep AWS tool expertise: Organizations/Control Tower, IAM, Bedrock, KMS/HSM, VPC/Transit Gateway, Direct Connect/VPN, EC2/EKS/ECS, RDS/Aurora, DynamoDB, S3/EFS/FSx, ELB/API Gateway/Lambda, CloudTrail/CloudWatch/Config/GuardDuty, Route 53, EventBridge/SQS/SNS.
- Understanding of RMF accreditation (SSP, POA&M, Continuous Monitoring) and control implementation under NIST SP 800-53 Rev. 5.
- Hands-on application of DISA STIGs and DoD Cloud Computing SRG for IL2–IL6 workloads.
- Strong understanding of GovCloud (US) patterns and boundary controls.
- Strong knowledge of networking fundamentals: TCP/IP, DNS, TLS/PKI, routing, micro-segmentation, Zero Trust patterns.
- Logging/monitoring design and SIEM integration.
- Incident response and troubleshooting across app, infra, and network layers.
- Excellent communication, documentation, stakeholder engagement skills, and the ability to lead cross-functional initiatives.
Benefits
- Medical, Dental & Vision Coverage
- Wellness Program
- 401(k) Matching
- Disability (Short Term & Long Term)
- Employee Assistance Program
- Life Insurance
- Education & Training
- Generous Leave Policy (11 Federal Holidays, PTO, Military Leave, Bereavement and Jury Duty)
Related Guides
Related Categories
Related Job Pages
More Infrastructure Engineer Jobs
• Design, develop, and maintain core infrastructure supporting optimization engines and planning workflows • Improve scalability, reliability, and performance of distributed optimization workloads • Build reusable infrastructure components for model execution, data handling, and solver integration • Analyze performance bottlenecks in optimization pipelines and underlying systems • Optimize compute, memory usage, and data flow for large-scale planning problems • Support solver integration and tuning (e.g., Optimization approaches) • Contribute to evolving platform architecture and hardware • Design systems that support large datasets, parallel execution, and incremental solving • Ensure systems meet enterprise-grade reliability and maintainability standards
Associate Infrastructure Operations Engineer
UnitedHealth GroupUnitedHealth Group is a healthcare and well-being company that’s dedicated to improving the health outcomes of millions around the world. We are comprised of
Role Description As a member of the Optum team, you will: - Provide support to OPTUM clients and associates. - Research, resolve, and respond to client deliverable issues received via telephone calls, E-Mail, or escalations, and provide support in accordance with current standards. - Complete, maintain, and process pertinent problem tracking entries and records in ServiceNow. - Communicate to internal and external customers as required for new job requests, updates to jobs, and any reported issues with jobs. - Coordinate the scheduling and delivery of all client deliverables within SLA using Robot Schedule. - Participate in building customized notifications for high profile jobs to ensure completion. - Identify scheduled jobs that have terminated and resolve the root cause of termination. - Assist in RxCLAIM job updates due to MOD and patch installs. - Ensure all job setups are put through quality assurance procedures to ensure accuracy. - Ensure all payment deliverables are put through quality assurance processes to ensure accuracy. - Ensure successful delivery of client deliverables through PragmaEdge Community Manager Software. - Participate in the setup and continued maintenance of the MFT process (managed file transfer) to Pragma and Sterling Integrator. - Participate in the verification of delivery. Qualifications - High School Diploma/GED. - 2+ years of experience with AS400, IBMi midrange systems. - 2+ years of experience with Robot Scheduler by Fortra. - 2+ years of experience with Microsoft Office Suite. - 1+ years of experience with virtual desktop software. Requirements - Sterling Integrator and familiarity with SFTP and Connect Direct. - ServiceNow or experience with other ITSM or CRM systems. - AIX, LINUX and UNIX, SQL. - Ability to multi-task and address day-to-day issues in conjunction with larger long-term projects. - Ability to read, analyze and interpret general business periodicals, professional journals, and technical procedures. - Ability to interpret a variety of instructions furnished in written, oral, diagram, or schedule form. - Ability to effectively present information and respond to questions from groups of associates, managers, and clients. - Possess excellent written, verbal, and interpersonal communication. - Must be creative and resourceful, self-starter, highly motivated, critical thinker. - Solid analytical, organizational, and problem-solving skills. - Working knowledge of IBM iSeries Operating system and Microsoft Operating systems. - Personable, self-motivated individual that works well with a team or individually as necessary. - Understanding of general computer terminology for proper communication between staff. - Must be willing to learn and take direction in new areas. - Attention to detail. - Familiarity with HIPAA guidelines preferred. Benefits - Comprehensive benefits package. - Incentive and recognition programs. - Equity stock purchase. - 401k contribution (all benefits are subject to eligibility requirements).
Senior Infrastructure Engineer
AbacusNextCloud-based tech provider for legal and accounting firms. AbacusLaw, Amicus Attorney, Amicus Cloud, OfficeTools, HotDocs
• Support and document IT infrastructure systems, ensuring stability and performance. • Comprehend and manage system architecture involving servers, databases, APIs, load balancers, firewalls, networking, and SAN. • Build, configure, and maintain virtualized environments using Hyper-V and/or VMware. • Administer Windows Server environments including patching, performance tuning, and security hardening. • Manage Active Directory (on-prem and Azure AD) and user provisioning tasks. • Design, implement, and own automation scripts using PowerShell and infrastructure-as-code tools like Ansible or Terraform. • Oversee backup processes at various levels—VM snapshots, OS-level, and SAN-level. • Monitor system health and performance using appropriate logging and monitoring tools; respond to incidents and perform triage effectively. • Use code management repositories (e.g., GitHub, Azure DevOps) for infrastructure configuration and deployment. • Contribute to SCRUM or Agile processes by delivering infrastructure-related tasks and improvements. • Lead projects from design to completion with minimal supervision and guide junior engineers through mentorship and knowledge-sharing. • Participate in on-call rotation and provide timely resolution to critical infrastructure issues.
• Contribute to vulnerability remediation discussions • Analyze findings from our CSPM to identify patterns to remediate • Contribute to the design and implementation of cloud and network security features • Reproduce external vulnerability reports • Develop and tune agents to help drive our shift towards agentic workflows



