Cloud Engineer

Cloud Engineer

The Defense Sector at Leidos is looking for a Cloud Engineer to support multiple fast-paced programs across the Air Force. The Cloud Engineer will deploy, maintain, and scale hybrid cloud digital infrastructure for multiple Air Force customers. This position requires a fast-learning, high-performing candidate with a proven history of delivering cloud solutions to customers. The ideal candidate will have experience in deploying and maintaining cloud infrastructure in Microsoft Azure cloud using DevSecOps practices and an Everything-as-Code approach. This position offers a valuable opportunity to further develop your career in cloud engineering within an Air Force program, contributing to the secure and efficient delivery of service in a challenging and innovative environment. You will be a member of a team providing 24x7 monitoring and management of customer networks and will be on-call in the event of off-hours emergencies.

Primary Responsibilities:

• Design, deploy, and manage virtual cloud infrastructures across hybrid environments in Microsoft Azure Cloud (IaaS & PaaS).
• Automate deployments and configurations using Infrastructure-as-Code (IaC) and Configuration-as-Code tools such as Terraform, Ansible, and ARM/BICEP templates.
• Provision, maintain, and scale cloud resources in Microsoft Azure in collaboration with cross-functional teams.
• Monitor cloud resource utilization to ensure cost efficiency and scalability.
• Troubleshoot and resolve system, application, and infrastructure issues, performing root cause analysis as needed.
• Ensure infrastructure meets security, compliance, and operational standards within a DevSecOps framework.
• Support CI/CD pipelines and integrate infrastructure automation into the development lifecycle.
• Implement and manage containerization and orchestration technologies, such as Docker and Kubernetes, for microservices architectures.
• Configure and maintain monitoring tools to ensure system and application availability and performance.
• Identify and implement optimizations to improve efficiency, reduce latency, and enhance system uptime.
• Apply security best practices, including identity and access management (IAM), network segmentation, and encryption, to protect hybrid cloud infrastructures.
• Assist in audits and compliance initiatives (e.g., RMF, NIST, ISO 27001).
• Provide Tier-2/3 support for escalated issues, working closely with internal teams and external vendors.
• Document procedures, configurations, and troubleshooting steps to enhance knowledge sharing.

Basic Qualifications:

• US Citizen with an active Top Secret clearance with the ability to obtain an SCI prior to your start date.
• Bachelor's degree with 4+ years of experience or a Master's degree with 2+ years of experience. Additional experience may be considered in lieu of a degree.
• Must have a DoD 8140 Intermediate certification (Security+ CE or equivalent) (formerly DoD-8570 IAT Level 2 baseline certification).
• Proficiency in virtualization technologies, including VMware, Hyper-V, and OpenStack.
• Proficiency in public cloud platforms such as AWS, Azure, Google Cloud (GCP), and Oracle Cloud Infrastructure (OCI).
• Hands-on experience with Infrastructure-as-Code (IaC) tools like Terraform, Ansible, and CloudFormation.
• Solid understanding of containerization (Docker) and orchestration platforms (Kubernetes).
• Familiarity with monitoring tools (Prometheus, Grafana, etc.) and incident management.
• Solid Understanding of networking concepts, including VPCs, subnets, VPNs, and firewalls.
• Practical knowledge of DevSecOps principles, methodologies, and best practices.
• Interest in continuous learning and professional development in cybersecurity and DevOps practices.

Preferred Qualifications:

• US Citizen with an active TS/SCI security clearance.
• Experience with Air Force programs.
• Experience with security tools and practices related to DevSecOps (e.g., SAST, DAST, IAST).
• Experience with compliance standards (e.g., OWASP, NIST) and DoD regulations.
• Expert cloud certifications such as Microsoft Certified: Azure Solutions Architect Expert or similar certification from another cloud provider.
• Experience with Azure Stack Edge family of devices
• Experience with DoD networks, especially classified and operational networks
• Understanding of enterprise networking concepts, especially Virtual Private Networks (VPNs), tunneling, QoS, and cloud connectivity solutions (e.g. Azure Express Route)
• Experience with Infrastructure as Code (IaC) and security automation.