USAF - Cloud Engineer

cFocus Software Incorporated • Full-time • Linthicum Heights, MD, US • 4d ago

cFocus Software seeks a Cloud Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:

Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience implementing and operating enterprise cloud or hybrid infrastructure and integrating cloud services with on-premises systems.
Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.

Duties:

Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
Automate Security Technical Implementation Guides (STIGs), system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
Provide technical evidence, documentation, and continuous monitoring data supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.