Cloud Engineer (6851)

As a Cloud Engineer, you will support the design, implementation, operation, and continuous improvement of secure AWS cloud environments supporting critical government missions. You will work across cloud infrastructure, automation, security, operations, and architecture to help deliver reliable and scalable cloud services.

Depending on experience and technical depth, this position may be filled at the Cloud Engineer I, II, or III level. Responsibilities will scale based on level, with more senior engineers taking greater ownership of architecture, complex engineering decisions, automation, technical leadership, and mentoring.

Work is 5 days onsite in a SCIF in Reston, VA.

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

What you’ll do:

• Design, deploy, configure, operate, and maintain secure AWS cloud infrastructure in classified government environments.
• Support cloud services across infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) environments.
• Work with AWS services such as EC2, EBS, S3, IAM, VPC, Lambda, CloudFormation, and related cloud technologies.
• Develop and maintain infrastructure-as-code using tools such as Terraform, CloudFormation, or Ansible.
• Automate deployment, configuration, monitoring, and routine cloud-management activities using scripting and automation tools.
• Monitor cloud infrastructure and application performance using approved monitoring and application performance monitoring tools.
• Manage and respond to cloud operations tickets, incidents, and service requests, ensuring issues are documented, prioritized, communicated, and resolved within established service-level expectations.
• Troubleshoot cloud infrastructure, access, networking, application, and service issues in complex environments.
• Support incident response activities by identifying issues, documenting actions, escalating complex problems when necessary, and helping restore services.
• Implement and maintain cloud security controls, including IAM, SSO, federation, security baselines, account-auditing policies, and other required controls.
• Support cloud governance, compliance, risk-management, and architecture-review activities in accordance with applicable government security requirements.
• Secure and harden Linux and Windows cloud systems and images in accordance with applicable security baselines and RMF requirements.
• Create, manage, maintain, and harden Amazon Machine Images (AMIs) and other cloud-based operating system images.
• Support cloud environments operating across multiple classification domains, including IL5 and IL6+ environments.
• Collaborate with application, infrastructure, cybersecurity, DevSecOps, and engineering teams to define requirements and implement scalable cloud solutions.
• Support containerized and cloud-native environments using technologies such as Docker, Kubernetes, and Amazon EKS.
• Support microservices, serverless computing, and other modern cloud architecture patterns.
• Gather technical information and contribute to risk assessments, architecture reviews, compliance evidence, and remediation activities.
• Maintain technical and operational documentation, including troubleshooting guides, operating procedures, architecture documentation, and recurring issue trends.
• Communicate technical issues, recommendations, and solutions clearly to both technical and non-technical stakeholders.
• Stay current on AWS services, cloud technologies, security requirements, and emerging engineering practices.
• Participate in team knowledge sharing and contribute to the continuous improvement of cloud engineering and operational processes.
• At more senior levels, provide architecture guidance, lead complex engineering efforts, review technical solutions, mentor junior engineers, and help establish cloud engineering best practices.

What you’ll need to succeed:

• Active TS/SCI clearance with a current CI Poly.
• Relevant cloud, systems, infrastructure, or engineering experience appropriate to the level for which you are being considered.
• Hands-on experience designing, building, supporting, or troubleshooting cloud infrastructure.
• Strong AWS experience, including services such as EC2, EBS, S3, IAM, VPC, Lambda, and CloudFormation.
• Experience supporting AWS GovCloud, classified AWS environments, or other secure government cloud environments.
• Experience with infrastructure-as-code tools such as Terraform, CloudFormation, or Ansible.
• Experience implementing cloud security controls and working within established security and compliance requirements.
• Experience with IAM, authentication, authorization, SSO, federation, or similar enterprise identity technologies.
• Experience securing and hardening Linux or Windows cloud systems.
• Scripting and automation experience using Python, PowerShell, Bash, or a similar language.
• Understanding of cloud architecture patterns, networking, microservices, serverless computing, and container technologies.
• Experience with Docker, Kubernetes, EKS, or similar container platforms.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to work independently as well as collaboratively with technical and cross-functional teams.
• Strong written and verbal communication skills with the ability to explain technical concepts to technical and non-technical audiences.
• Current certification meeting applicable DoD 8140/8570 requirements, such as Security+ or above.

Preferred Qualifications:

• Experience supporting AWS environments across multiple classification domains.
• Experience supporting IL5, IL6, or higher environments.
• Experience creating, managing, and hardening Amazon Machine Images.
• Advanced experience with Terraform and cloud infrastructure automation.
• Experience with Kubernetes or Amazon EKS in production environments.
• Experience with DevSecOps environments and CI/CD pipelines.
• Experience with microservices or serverless architectures.
• Experience with Azure or Google Cloud Platform.
• AWS cloud certification.
• Experience supporting large-scale cloud modernization initiatives.
• Experience providing architecture guidance or technical leadership.
• Experience mentoring or providing technical guidance to other cloud engineers.

Leveling and Salary:

This position may be filled at the Cloud Engineer I, II, or III level. The level offered will be determined based on the candidate’s relevant experience, technical depth, level of independence, architecture experience, and overall qualifications.

• Cloud Engineer I: 4–7 years of relevant experience | $150,000–$185,000
• Cloud Engineer II: 8–9 years of relevant experience | $190,000–$210,000
• Cloud Engineer III: 10+ years of relevant experience | $200,000–$235,000

1. Cloud Engineer I level, the position will focus more heavily on cloud implementation, operations, troubleshooting, ticket management, automation, and supporting established architectures.
2. Cloud Engineer II level, candidates will be expected to demonstrate greater independence, deeper AWS and infrastructure-as-code expertise, and the ability to design and implement cloud solutions while resolving more complex technical issues.
3. Cloud Engineer III level, candidates will take greater ownership of cloud architecture and complex engineering decisions, lead automation and modernization efforts, provide technical guidance, and mentor other engineers.

The final level and salary offered will be determined based on the candidate’s qualifications, relevant experience, technical expertise, internal equity, and organizational needs.