Cloud Engineer

What you’ll do:

Build the cloud where the magic lives. Design, deploy, and operate secure, scalable AWS environments (EC2, VPC, IAM, S3, Aurora, and Neptune) that keep our systems fast and our data exactly where it belongs, supporting CMS as it merges systems into one AI-driven platform.
Respect the pillars. Build to the AWS Well-Architected Framework, balancing performance, reliability, security, and cost like they actually matter (because they do).
Give AI a home. Stand up the cloud environment for AI, hosting open-source LLMs and ML workloads (think SageMaker, Glue, DataBrew) entirely within CMS’s AWS account, so sensitive data never wanders off.
Keep the lights on. Implement high availability, disaster recovery, and COOP continuity so we hit our SLAs even on a genuinely bad day.
Make security non-negotiable. Wire up AWS Security Hub, Config, and Audit Manager to keep us continuously compliant inside a FISMA Moderate boundary aligned to RMF, ARS, and IS2P2.
Run a tidy multi-tenant house. Build isolated, segregated, quota-managed spaces where different teams can experiment with AI without elbowing each other.
Be the bouncer. Design least-privilege IAM and role-based access controls, then keep them honest with regular access reviews and audits.
Make it observable. Set baselines, configure monitoring and alerting, and turn system health into something the whole team can actually see, ideally before a user files a ticket.
Chase the waste. Model cloud costs, hunt down savings with tools like AWS Trusted Advisor, and help keep our AI workspace financially sane.

What we’d like you to have:

3-5 years of hands-on AWS experience. You’ve built and run real environments, not just collected exam badges (though we like those too).
Solid comfort with core AWS services: compute, networking (VPC), IAM, storage, and managed databases.
A security-first reflex and familiarity with cloud-native security and compliance tooling (Security Hub, Config, Audit Manager, or similar).
Automation instincts. Python, Bash, and a genuine fondness for Infrastructure as Code (Terraform, Ansible), because clicking around the console doesn’t scale.
An eye for cost optimization. You know the cheapest architecture and the best architecture are usually closer than people think.
All the curiosity. You’d rather understand why something broke than just restart it and hope.
A sense of humor and a calm head. When something’s on fire at 2 a.m., you’re the person everyone’s relieved is on the call.

What would blow us away:

You’ve hosted AI/ML or LLM workloads in the cloud - SageMaker, GPU instances, or self-hosted open-source models.

You have a few AWS certifications (Solutions Architect, SysOps, or Security Specialty) and the scars that come with real-world use.

You’ve got federal or civic-tech experience. Bonus points if you’ve operated inside a FISMA boundary, navigated an ATO, or survived a cATO effort.

Even if you don’t meet 100% of the qualifications, we encourage you to apply. At Skyward, we’re focused on hiring individuals with the right skills and passion to grow, not just checking off every box.

And now the important part. What we offer you:

Medical, dental, vision insurance (fully paid for employees)
15 days of paid leave
7 days of sick leave
2 days bereavement leave
11 paid Federal holidays
Up to 40 hours for jury duty
401K with 4% employer contribution (and no vesting period)
Up to 4 weeks of paid paternity and maternity leave
Company provided laptop
$5,000 per year for professional development
$600 per year for technical supplies and equipment
$2,000 referral bonus
Life and disability insurance
HSA and FSA
Legal Shield and ID Shield Voluntary Benefits
Opportunity to work in a collaborative, motivated team focused on modernizing government services with cutting-edge technology and innovative solutions. Who says government work can't be exciting!