Cloud Engineer, Platform

ICF is a global consulting and technology services provider dedicated to delivering innovative solutions to complex challenges faced by government agencies, private sector organizations, and non-profit entities. With a focus on leveraging cutting-edge technology and deep industry expertise, ICF empowers clients to achieve their strategic objectives and foster positive change.

About the role

This position is a contingent role, dependent upon the award of a federal contract. ICF is seeking a skilled Cloud Platform Engineer to support a federal technology program. The successful candidate will deploy, configure, and maintain cloud infrastructure across multiple platforms, including Azure, AWS, and Google Cloud Platform. Reporting to the Cloud / Enterprise Architecture Lead, the engineer will focus on building and operating a multi-cloud landing zone environment using infrastructure-as-code (IaC) and DevSecOps practices. This role demands a hands-on professional who is adept at automating cloud environments, implementing security controls, and ensuring compliance with federal standards. The candidate will work remotely with occasional onsite visits in the Washington, DC Metro area. The position requires U.S. citizenship and the ability to obtain and maintain a Public Trust background investigation.

Responsibilities

• Deploy and manage cloud landing zone architectures across Azure, AWS, and Google Cloud using automated, repeatable provisioning methods
• Implement infrastructure and security policies as code utilizing IaC templates, GitHub Actions, and CI/CD pipelines to ensure environment consistency, auditability, and automation
• Build and maintain system integrations through APIs, SDKs, webhooks, and event streams, ensuring proper secrets management, error handling, and logging
• Manage Azure Virtual Desktop deployments for remote access scenarios tailored to specific user personas
• Oversee DNS configuration as code for all agency platforms, including certificate management and related security configurations
• Integrate platform logs, alerts, and risk signals into centralized monitoring tools; automate detection of misconfigurations, risky behavior, and suspicious activity
• Conduct quarterly reviews of cloud environments against security baselines and compliance standards, leveraging compliance-as-code tools where applicable
• Coordinate with identity, device, and cybersecurity teams to align access policies, device compliance, and conditional access within a Zero Trust architecture
• Maintain comprehensive documentation, including architecture diagrams, configuration baselines, operational runbooks, and procedures for ongoing environment support and extension
• Resolve complex cloud platform issues escalated from operations and service desk teams to ensure minimal disruption and optimal performance

Qualifications

• Bachelor's degree or equivalent experience
• 5+ years of experience in cloud engineering or platform operations
• 3+ years of deploying and managing cloud landing zones in Azure, AWS, or GCP in production environments
• 2+ years of experience implementing infrastructure as code using tools such as Terraform, Bicep, CloudFormation, or similar
• 2+ years supporting federal IT programs, preferably within HHS, NIH, FDA, or other health-related agencies
• U.S. Citizenship required
• Ability to obtain and maintain a Public Trust background investigation
• Authorized to work in the United States and reside within the country

Benefits

• Competitive salary range: $108,006.00 - $183,610.00
• Remote-friendly work environment with occasional onsite requirements in the Washington, DC Metro area
• Opportunities for professional development and certifications in cloud and security disciplines
• Collaborative and inclusive workplace culture that values diversity and innovation
• Comprehensive benefits package, including health, dental, vision, and retirement plans
• Support for work-life balance and flexible working arrangements