Role Description We are looking for highly motivated AWS expert who is excited about leveraging his skills and strategic ideas to improve mission execution, who is passionate about creating an amazing user experience that delights end-users and makes their jobs easier. This candidate builds fantastic relationships across all levels of the organization and is recognized as a problem solver who looks to elevate the work of everyone around them. - Provides expert guidance to projects to ensure that their processes and deliverables align with the Hyatt target state architecture. - Designs and develops enterprise data solutions based on architecture and standards leveraging leading architecture practices and advanced data technologies. - Implements solutions for data migration, data delivery and ML pipelines. - Implements Identity Access Management Roles and policies. - Builds resilient, reliable, performant and secure Data Platform and Applications. - Works closely with application development and data engineer teams on day-to-day tasks along with project planning and implementation. - Automates deployments of AWS services and BI Applications. Qualifications - 12+ years of experience within the field of application/platform engineering or related technical work including business intelligence, analytics. - 6+ years of experience with AWS Senior Cloud Data Engineering, management, maintenance, or architecting, implementing best practices and industry standards. - Experience with data warehousing platforms such as Snowflake, Redshift or similar. - Strong knowledge and established experience with AWS services including but not limited to: S3, EC2, RDS, Lambda, Cloud Formation, Kinesis, Data Pipelines, EMR, Step Functions, VPC, IAM, and Security Groups. - Experience with DB technologies (e.g., SQL, Python, PostgreSQL, AWS Aurora, AWS RDS, MongoDB, Redis). - Experience with CI/CD tools, pipelines, and scripting for automation (GitHub Actions, Jenkins, AWS Code Pipeline tools, Cloud formation and Terraform). - High degree of knowledge in IAM Roles and Policies. - Strong knowledge configuring AWS cloud monitoring and alerts for cloud resource availability. - Strong scripting experience using PowerShell and/or Python. - High degree of knowledge in PaaS and SaaS application performance. - Understand enterprise level application architecture diagrams and IT security requirements. Requirements - Experience with AWS and Oracle Cloud. - Experience and comfort solving problems in an ambiguous environment where there is constant change. - Have the tenacity to thrive in a dynamic and fast-paced environment, inspire change, and collaborate with a variety of individuals and organizational partners. - Experience designing and building scalable and robust data pipelines to enable data-driven decisions for the business. - Effective problem solving and analytical skills. Ability to manage multiple projects and report simultaneously across different stakeholders. - Rigorous attention to detail and accuracy. - Demonstrated ability to troubleshoot technical problems and issues. - Passionate about programming and learning new technologies. - Experience planning and executing on-premises to AWS migrations. - BA or BS degree in Computer Engineering, Computer Science, or related fields. - Strong verbal and oral communication. Preferred Experience - Experience with large scale enterprise streaming services such as Kafka. - Experience with Kubernetes and Docker containers or AWS Fargate. - Experience implementing applications with both Windows and Linux server OS. - Experience with networking, security groups, or policy management about Cloud resources across multiple operating systems, including UNIX, Linux, or Windows.

• Navigate and remediate a complex brownfield estate featuring end-of-life operating systems (Windows Server 2008, older Linux), hardcoded IP addresses, and undocumented server-to-server dependencies. • Redesign and migrate legacy on-premises load balancing architecture to GCP Cloud Load Balancing (Internal/External models) with zero downtime. • Write, maintain, and deploy infrastructure strictly using Terraform within an existing codebase and GitHub Actions CI/CD pipelines. • Operate and troubleshoot pipelines using Workload Identity Federation (WIF) and OIDC token exchange for keyless GCP authentication. • Ensure all architectural changes strictly adhere to HIPAA and PIPEDA frameworks. • Manage active IPsec VPN tunnels between on-premises systems, GCP, and various third-party functional sites. • Leverage AI prompting tools to accelerate current-state understanding, map hidden dependencies, and compress discovery time.

• manage and help execute the PLM Upgrade projects • driving hands on execution of the upgrades of PLM Products hosted in Cloud • managing different phases of the PLM upgrade projects, from request phase till hypercare • motivating fellow project members inside and outside the cloud organization • ensuring on time and quality delivery • work closely with multiple global teams comprised of Cloud Infrastructure, Cloud Applications, Cloud Database and fellow PLM Upgrade Engineers • responsible for hands-on execution of Upgrades, analyzing client requirements; designing, building, testing, documenting, supporting and ensuring quality Implementation and Education Content deliverables for the projects assigned to the PLM Upgrade team

Role Description Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently has an opening for a Cybersecurity and Cloud Automation Engineer to support AWS, Azure, Google, and Oracle clouds. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness. Location: This position may require travel to support customer or corporate meetings near Hanscom AFB (Boston, MA), Huntsville, AL or Reston, VA. Role Summary: - Dual-role engineer focused on securing and automating AWS environments using IaC, CaC, and Security-as-Code. - Works within DevSecOps teams to design secure cloud solutions and build automated provisioning, configuration, and monitoring pipelines. Core Responsibilities: - Implement and maintain security controls for AWS services, aligned with NIST, FISMA, and DISA STIG requirements. - Configure secure logging, monitoring, and telemetry (e.g., CloudTrail, CloudWatch, SIEM integrations) for cloud workloads. - Perform vulnerability scanning, assessment, and coordination of remediation across cloud hosts, containers, and services. - Contribute to security architecture reviews and change/configuration boards to ensure secure designs and deployments. IaC/CaC & Automation: - Develop, maintain, and version-control IaC modules (e.g., Terraform, CloudFormation) for AWS networking, compute, storage, IAM, and security resources. - Use CaC tools (e.g., Ansible, Puppet) to automate OS, middleware, and application configuration and hardening. - Build and support CI/CD pipelines that integrate IaC/CaC and security checks for automated build, test, and deployment. - Create and maintain hardened, STIG/CIS-aligned golden images and reusable templates for repeatable secure deployments. Security-as-Code & Compliance: - Encode security baselines, IAM policies, network segmentation, and encryption standards into IaC/CaC and pipeline code (Security-as-Code). - Integrate automated security and compliance testing (SAST/DAST, dependency scanning, policy-as-code) into pipelines to enforce controls before release. - Support continuous monitoring and ATO/continuous authorization by maintaining evidence, automated checks, and documentation for audits. Operations & Zero Trust: - Support day-to-day operation of multi-environment AWS landscapes (dev/test/stage/prod/DR), including monitoring health and performance. - Troubleshoot issues across networking, access, and application deployment; contribute to incident and problem management and root cause analysis. - Implement and maintain identity- and context-aware access controls, MFA, and policy-based access in line with Zero Trust strategies. Collaboration & Documentation: - Collaborate with developers, cloud engineers, security analysts, and operations staff to design secure, automated solutions. - Contribute to technical documentation, including architecture diagrams, IaC/CaC module references, SOPs, and runbooks. - Share best practices in secure cloud engineering and automation with teammates; provide informal knowledge transfer and peer support (no direct reports). Qualifications - Bachelor’s degree in a technical field with 8 years of applicable experience; additional years of experience in cloud and cybersecurity engineering will be accepted in lieu of a degree. - Hands-on experience with AWS cloud services and DevSecOps practices in production environments. - Practical experience with IaC/CaC tools (e.g., Terraform/CloudFormation and Ansible/Puppet) and CI/CD pipelines. - Experience applying NIST, FISMA, and STIG/CIS controls in cloud environments and supporting ATO/accreditation activities. - Strong written and verbal communication skills and ability to work effectively in cross-functional teams. Preferred Qualifications - AWS certifications (e.g., Solutions Architect, Security Specialty) or security certifications such as CISSP, CISM, or CAP. - Familiarity with Zero Trust architectures, SASE/ZTNA solutions, and ICAM integrations. - US DoW Secret clearance. - Access to SIPR Facility. Pay Range Pay Range $107,900.00 - $195,050.00. The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.