AWS GovCloud Engineer: Modernize & Secure 300+ Apps

The following states/districts are excluded from this job ad: AK, CA, CO, CT, DC, HI, LA, MA, MN, MO, NE, NV, NH, NJ, NM, NY, ND, OR, PR, RI, VT, WA, WY Future Need - Actively Interviewing Location: Remote in any United States jurisdiction not excluded from this job advertisement. Sustain and modernize the AWS GovCloud infrastructure that Veterans depend on every day! As an AWS Cloud Engineer, you will operate and maintain the AWS managed services underpinning 300+ mission-critical applications while driving platform modernization. Position Description: The Amazon Web Services (AWS) Cloud Engineer operates and maintains the full suite of AWS managed services and EC2-based infrastructure. This role performs adaptive, perfective, preventive, and corrective maintenance; implements Infrastructure as Code (IaC) governance; and supports multi-region enablement. Minimum/General Experience: 3 years of experience in AWS cloud engineering Minimum Education: Bachelor's Degree in computer science, information technology, or related field Essential Skills/Qualifications Excellent experience operating AWS managed services in production GovCloud environments (e.g., ElastiCache, RDS, DocumentDB, Kinesis, MSK, Athena, S3) maintaining performance, availability, and cost efficiency Excellent experience managing EC2-based platform services (e.g., Consul, Vault, MongoDB, Atlassian tooling, Active Directory, Nexus, Postfix) in enterprise-scale AWS environments Excellent ability to implement and maintain 100% IaC governance using Terraform Excellent experience with AWS secrets management including HashiCorp Vault and AWS Secrets Manager Excellent knowledge of AWS cost optimization including instance right-sizing, reserved instances, Savings Plans, S3 tiering, and cloud cost analytics Above average experience with AWS certificate management including ACM, certificate rotation automation, and PKI operations ensuring zero production disruption Above average knowledge of multi-region AWS architecture including S3 replication, RDS read replicas, ElastiCache cross-region replication, and data consistency considerations Working knowledge of AWS EKS managed node groups and the interaction between EC2-based services and Kubernetes workloads in a multi-VPC environment Experience supporting a federal agency Excellent verbal and written communication skills General Physical Requirements needed to perform the essential functions of this job may vary based on the location of the assignment . Assignment Location - Remote Sedentary Work - Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Typing, communicating, repetitive motions. Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting. Inside environmental conditions with protection from outside elements. Security : Active Federal Civilian Public Trust clearance U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years Federal Civilian Public Trust Consists of a review of up to but not limited to: Covers 10 year period and in some instances lifetime events OPM Security Investigations Index (SII) DOD Defense Central Investigations Index (DCII) National Agency Check (NAC) records FBI name check FBI fingerprint check Credit report check Written inquiries to previous employers and references listed on the application for employment Potential interviews with the subject, spouse, neighbors, supervisor, coworkers Law enforcement check Court records check Education check - Attendance and Degrees Acceptable Credentials Tasks/activities Include, But Are Not Limited To Operates and maintains all AWS managed services supporting Health Applications Platform Services (HAPS) including ElastiCache, RDS, DocumentDB, Kinesis, MSK, and Athena Ensures 99.995% incident-free availability for mission-critical managed service tiers Manages EC2-based platform services including Consul, Vault, Active Directory, Nexus, and Postfix Performs adaptive, perfective, preventive, and corrective maintenance Implements and maintains 100% IaC governance using Terraform for all managed AWS resources Prohibits and remediates manual production configuration changes Maintains code review cycle time within 3 business days Implements and operates centralized secrets management using HashiCorp Vault and AWS Secrets Manager Ensures automated rotation for 100% of production secrets and manual rotation at least every 90 days Manages AWS certificate lifecycle for managed services Ensures 100% of TLS certificates are renewed 30+ days prior to expiration using automated mechanisms and immediately remediates any expired production certificates Participates in daily Change Control Board (CCB) meetings Ensures all AWS managed service changes are submitted 3+ business days in advance and validated within 2 hours post-implementation Supports the Multi-Region Enablement Plan including assessment of AWS managed services warranting multi-region deployment and data replication strategies with cost-to-benefit analysis Ensures all AWS managed services operate on VA TRM-approved software versions and contributes version compliance data to Program Increment Software Version Posture Reports Contributes AWS service health metrics, cost analytics data, and incident information to the Monthly Maintenance Report Compensation & Benefits: The annual projected pay range for this position is $86,375 - $117,390 with consideration being given to various factors including but not limited to qualifications, experience, job responsibilities, and geographic location. Oxley Enterprises, Inc. offers a full array of benefits including: Medical, dental, vision and prescription drug coverage for you and your family. Life Insurance, short-term disability and long-term disability paid for by the Company. Supplemental coverages including Accident, Critical Illness, and Hospital. Additional Life insurance coverage for you and your dependents. 401k plan with various options to select based on your retirement goals. Oxley Enterprises®, Inc. is a certified service-disabled veteran-owned (SDVOSB), veteran-owned (VOSB), and woman-owned small business (WOSB) that has 26 years of experience building and delivering quality IT systems and programs. Oxley is ranked in the INC 5000 7 times (2016, 2017, 2018, 2021, 2023, 2024, 2025). Oxley is a 2019 - 2025 Department of Labor HIRE Vets Medallion Award Winner. Oxley is Virginia Values Veterans certified. All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law. If you require a reasonable accommodation to apply for a position at Oxley Enterprises, Inc., please send an email to our Human Resources Department at: View email address on click.appcast.io with the following information: Subject Line: Accommodation Request Provide a description of your accommodation request Include your contact information: Full name, Email address, Best number to reach you (optional) We participate in the E-Verify program. #J-18808-Ljbffr Oxley Enterprises, Inc.