Systems Engineer SME (Cloud)
Position Responsibilities
Provide technical leadership and hands-on development and implementation of commercial cloud solution architectures focused on security, scalability, and resiliency.
Plan, design, and manage migration, re-platforming, integration, implementation, and operations of complex cloud environments, including IL5/IL6 and JWCC-aligned architectures.
Ensure commercial cloud service offerings (CSO) comply with DoD Cloud Computing guidelines and security requirements.
Develop and conduct testing of cloud and virtualization systems.
Maintain technical expertise in modern cloud and virtualization technologies (automation, hypervisors, containers, virtual networking, storage, scaling, etc.).
Evaluate and report on emerging cloud technologies to enhance capabilities.
Provide systems engineering functions including requirements definition, system design, interface architecture, validation and verification, integration, lifecycle cost analysis, and performance analysis.
Participate in strategic planning discussions with senior leadership.
Provide recommendations and decisions supporting organizational and project objectives.
Serve as an organizational technical spokesperson and advisor on advanced cloud and systems engineering initiatives.
Support and enhance managed shared cloud services for complex DoD and enterprise networks.
Troubleshoot end-to-end connectivity issues across DoD networking infrastructure.
Administer and configure enterprise networking and security devices, including next-generation firewalls (Palo Alto), F5 devices, and routing platforms.
Utilize DevSecOps and automation tools including Git, Jenkins, Groovy, YAML, and cloud security capabilities.
Mentor junior team members and support process improvements across the cloud and infrastructure environment.
Requirements
- Ten (10) or more years of relevant experience.
- Proven experience designing and deploying cloud solutions as a cloud architect/engineer.
- Proficient with Red Hat Enterprise Linux and command-line administration.
- Expert experience with next-generation firewall deployment, configuration, and management (Palo Alto).
- In-depth experience with AWS Cloud, including Networking, VPNs, VPCs, Transit Gateway.
- Knowledge of BGP routing protocols and layer-3 network architectures.
- Experience troubleshooting across DoD network infrastructure.
- Proficiency with tools including Git, Jenkins, Groovy, YAML, and AWS security services (WAF, GuardDuty, IAM, Security Groups).
- General knowledge of AWS EC2, S3, Systems Manager, CloudFormation, CloudTrail, Lambda, IAM.
- Experience with AWS Workspaces or VDI deployment in AWS.
- Experience managing Route 53 in GovCloud environments.
- Experience implementing Zero Trust architectures.
- Administration experience with firewalls, F5, Panorama, Big IQ, or similar networking configuration tools.
- Experience mentoring junior team members.
- Ability to proactively identify and resolve operational inefficiencies.
Security Qualifications
- US Citizen.
- Active Department of Defense Secret Security Clearance.
Education And Certifications
- MA/MS in relevant field of study.
- AWS Cloud Engineer Certification with experience as AWS Cloud Engineer.
- IAT Level III certification (CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH).
- Computing Environment (CE) certification or certificate for the technical area of responsibility for Cloud or virtualization (e.g., Azure, AWS, oracle, IBM, etc.) with a preference in Azure.
Desired Qualifications
- 15 or more years of experience.
- DoD TS/SCI clearance.
- AWS Cloud Solutions Architect Professional Certification.
- ITIL V4 Foundations Certification.
- Experience with F5 Big-IP devices specificially the LTM and ASM modules.
- Experience with AWS networking and AWS Transit Gateway.
- Experience with Palo Alto FWs specifically managing security policy, NAT policy, and BGP routing.
- Experience with Juniper and Cisco virtual cloud routers.
- Experience with BGP routing in a DoD environment.
- Familiarty with AWS Site-to-Site Connections.
- Experience with Azure commercial cloud services.
- Knowledge of Route53 DNS.