Cloud Engineer - Senior

Role Description

The Cloud Engineer Senior supports the SEC ISS contract by designing, implementing, and operating secure, scalable cloud infrastructure for enterprise applications and services. This role is central to OIT's hybrid infrastructure strategy, ensuring reliable integration of cloud and on-premises environments while maintaining high availability and performance. The engineer drives automation-first operations using infrastructure-as-code and CI/CD practices to improve consistency, speed, and operational resilience. The position enforces zero-trust and compliance requirements, supports migration and modernization initiatives, and provides technical leadership across cloud engineering activities.

Primary Responsibilities

• Cloud Infrastructure Engineering and Operations
  • Design, implement, and manage cloud infrastructure solutions in Microsoft Azure and AWS, with Azure as the primary platform and AWS support focused on integration with project-team-managed workloads and potential future expansion.
  • Build and maintain cloud networking, storage, compute, app services, virtualization, and containerized environments.
  • Ensure scalability, resiliency, and high availability through proactive performance tuning, capacity planning, and operational optimization.
  • Partner with operations teams to monitor production services, resolve incidents, and improve reliability across cloud platforms.
  • May require participation in on-call or surge support activities depending on operational needs.
• Security, Identity, and Compliance
  • Implement and maintain cloud security configurations aligned with SEC security policies and zero-trust principles.
  • Engineer and support identity and access controls using Microsoft Entra, RBAC, conditional access, and least-privilege models.
  • Enforce governance controls and policy compliance to support organizational and regulatory requirements, audit readiness, and risk reduction.
  • Drive patching, vulnerability remediation, and secure configuration baselines across cloud-hosted infrastructure.
• Automation, IaC, and CI/CD Enablement
  • Develop and maintain automation using PowerShell, Bicep, ARM templates, and Terraform to provision and manage infrastructure.
  • Integrate infrastructure workflows with CI/CD pipelines to standardize deployments, reduce manual effort, and improve release quality.
  • Implement reusable IaC modules, scripting standards, and version-controlled operational artifacts.
  • Advance automated operating models to increase consistency, security, and scalability.
• Migration, Modernization, and Technical Leadership
  • Lead migration of workloads from legacy/on-premises platforms to modern cloud and hybrid architectures with minimal disruption.
  • Optimize cloud resource utilization, cost, and service performance based on operational and mission priorities.
  • Provide technical guidance and mentorship to junior engineers and cross-functional infrastructure teams.
  • Create and maintain architecture documentation, SOPs, and implementation guidance to support sustainable operations.

Qualifications

• This position is restricted to U.S. citizens only. Applicants must not hold dual citizenship with any other country to be eligible for work under this contract.
• The ability to obtain and maintain SEC Public Trust (or higher if required).
• Bachelor's degree in a relevant field and 8+ years of experience in IT infrastructure roles, including 5+ years focused on cloud engineering. Additional years of experience may be considered in lieu of degree.
• Demonstrated experience designing and managing secure, highly available cloud environments for enterprise services.
• Proven experience leading cloud migration and modernization efforts in regulated environments.
• Technical Skills:
  • Microsoft Azure and AWS cloud services (Azure primary; AWS integration support experience).
  • Cloud networking, storage, app services, virtualization, and containerization.
  • PowerShell, Bicep, ARM templates, and Terraform.
  • CI/CD pipeline implementation and automation practices.
  • Cloud governance, policy enforcement, and operational compliance.
  • Microsoft Entra identity services, RBAC, and access management.
  • Zero-trust security principles and secure cloud configuration practices.

Preferred Qualifications

• Experience supporting federal agency IT environments with FISMA/FedRAMP-driven security and compliance requirements.
• Hands-on experience with Kubernetes/OpenShift and cloud-native container platform operations.
• Experience integrating observability and ITSM platforms to improve incident response and service reliability.
• Experience implementing immutable infrastructure and policy-as-code controls in enterprise environments.
• Experience with cloud cost management and FinOps practices to optimize spend and performance.
• Microsoft Certified: Azure Solutions Architect Expert.
• AWS Certified Solutions Architect - Professional.
• HashiCorp Terraform Associate.

Pay Range

Pay Range $107,900.00 - $195,050.00. The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.