Lead Cloud Platform Engineer

Role Description

DecisionPoint seeks a Lead Cloud Platform Engineer to design, build, and maintain the IL5 cloud platform foundation supporting a large federal and DoD-aligned mission environment. This senior technical leadership role owns the creation and sustainment of cloud landing zones, shared services, Infrastructure-as-Code (IaC) templates, deployment patterns, and enterprise cloud environments that serve as the backbone for all application teams. The Lead Cloud Platform Engineer ensures cloud infrastructure is secure, reliable, scalable, and aligned with IL5, RMF, and Zero Trust cloud requirements, while enabling efficient, repeatable deployments for development, test, staging, and production environments. This position is fully remote.

Duties & Responsibilities

• Design, build, and maintain IL5-compliant cloud landing zones and enterprise cloud environments.
• Develop and maintain Infrastructure-as-Code (IaC) templates using Terraform, CloudFormation, or equivalent.
• Manage shared cloud services including networking, IAM, encryption, monitoring, logging, and DevSecOps integrations.
• Establish reusable deployment patterns used by all application development teams.
• Engineer secure VPC designs, cross-account architecture, segmentation, and network policy enforcement.
• Ensure compliance with IL5 requirements, RMF controls, Zero Trust principles, and DoD cloud security standards.
• Oversee platform performance, reliability, and scalability, implementing improvements as required.
• Support DevSecOps pipelines with cloud-ready configurations and automated deployment integration.
• Troubleshoot complex cloud infrastructure issues across networking, compute, storage, and identity layers.
• Optimize platform resource utilization, cost models, and scaling strategies.
• Produce architecture diagrams, IaC documentation, platform standards, and operational best practices.
• Mentor cloud engineers and support cross-team collaboration on cloud modernization and engineering efforts.

Qualifications

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
• Bachelor’s degree in Cloud Computing, Computer Science, Information Technology, or a related field.
• Minimum 10 years of experience designing and engineering cloud infrastructure solutions.
• Experience building and maintaining IL5 or other secure federal cloud environments.
• Extensive experience developing Infrastructure-as-Code templates and reusable deployment patterns.
• Experience leading cloud modernization or platform engineering initiatives for enterprise systems.
• Deep expertise with AWS GovCloud services and IL5 cloud architecture patterns.
• Strong proficiency with Terraform, CloudFormation, or other IaC tools.
• Knowledge of secure networking, VPC architecture, segmentation, and cross-account access.
• Strong understanding of RMF, STIGs, Zero Trust cloud requirements, and federal security controls.
• Experience with monitoring, observability, and cloud logging platforms.
• Experience with Kubernetes (EKS), container runtimes, or modern application hosting patterns.
• Familiarity with CI/CD pipelines and DevSecOps tooling.
• Experience integrating cloud platforms with SIEM and enterprise monitoring systems.
• Required: CompTIA Security+
• Preferred: AWS Solutions Architect – Associate or Professional, ITIL v4 Foundation, Advanced cloud or cybersecurity certifications.

Skills

• Strong leadership and architectural decision-making ability.
• Excellent communication skills for collaboration across engineering, cybersecurity, and product teams.
• High attention to detail and strong documentation discipline.
• Ability to troubleshoot complex, multi-layer cloud issues in secure environments.
• Ability to design and maintain reusable, scalable, and secure cloud platform components.