Job Family:
IT Architecture/Cloud
Travel Required:
None
Clearance Required:
Active Top Secret (TS)
What You Will Do:
Supporting a premier law enforcement agency, the Cloud Engineer owns the MREF cloud platform architecture, infrastructure build, monitoring solution, and DevSecOps infrastructure. Designs for near-zero downtime, maximizes use of the clients Cloud Services and clients Enterprise Developer Services, and drives cloud cost reduction..
- Maximize virtualization and containerization, emphasizing PaaS over IaaS, and maximizing use of FCS and FEDS managed services.
- Design, document, test, and implement the MREF Architecture Design Report optimizing for performance, availability, security, scalability, disaster recovery, and real-time or near real-time data integration across classified and unclassified networks.
- Design to a 4-hour Recovery Time Objective and a 4-hour Recovery Point Objective, propose data replication methods to achieve them, and describe how both will be demonstrated; pursue near-zero downtime for patch and release deployment.
- Propose and implement the MREF Implementation Plan and the monitoring solution recording SLA compliance in near real time at approximately a 5-minute delay, including the automated dashboard retaining at least 15 months of uptime history; review metrics monthly and deliver a performance optimization plan.
- Design, document, and implement the DevSecOps solution covering build and CI/CD tooling, with documentation captured in Confluence or an ATS-approved equivalent; periodically reassess the approach against emerging client platform offerings and present findings to government leads.
- Maintain and update the IaC solution to produce a rapid, flexible, automated build of a consistent, secure, and compliant environment, and identify all dependencies, licenses, and subscription costs.
- Deliver the detailed as-built system architecture, including network diagrams, NACLs and security groups, IAM policies and roles, OS configurations, logical and data flow diagrams covering low/high transfers, authentication flows, CI/CD pipelines, Splunk logging configuration, and health monitoring.
- Provide FCS with the specification of required services, architectural specification, and supporting documentation needed for account and resource provisioning.
- Propose the tagging and labeling strategy and track and project cloud costs; identify, propose, and implement methods to reduce cloud infrastructure cost.
- Incorporate cloud-native technologies and tools aimed at improving agility, lowering cost, and maximizing automation of system administration tasks.
- Perform regular and urgent STIG and vulnerability assessments across FIT and MREF, implement remediation per approved POA&M timelines, and provide status and results to the ISSO.
- Support the ISSO and ISSM in obtaining and maintaining the FIT and MREF ATO, including preparation of security documentation updates and participation in continuous monitoring activities.
- Ensure the application and infrastructure adhere to and satisfy all existing and future client security requirements, developed and maintained in accordance with policy guides, department policy, and applicable Executive Orders.
- Abide by licensing agreements and maintain the license tracker report accounting for government-procured licenses, license types, and copies in use across all environments.
- Maintain and support the cloud infrastructure in sustainment.
What You Will Need:
- EIGHT (8) years of infrastructure or platform engineering experience, including FOUR (4) years with Red Hat OpenShift or Kubernetes and THREE (3) years supporting Federal systems in an accredited environment.
- Bachelor's degree (FOUR (4) additional years of relevant experience may be substituted for formal education).
- US Citizenship is required.
- An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance
What Would Be Nice To Have:
- Red Hat OpenShift architecture, operators, storage classes, and network policy; containerization of enterprise application components.
- Cloud-native PaaS architecture and managed service selection; IaC automation frameworks.
- DevSecOps pipeline design, CI/CD architecture, and artifact management.
- Monitoring and observability design, including SLA instrumentation, Splunk, and uptime dashboarding.
- STIG hardening, vulnerability remediation, and security authorization support.
- Cloud cost management, tagging strategy, and infrastructure cost optimization.
- Red Hat Certified Architect or Certified Specialist in OpenShift Administration; CISSP.
The annual salary range for this position is $113,000.00-$188,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.
What We Offer:
Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.
Benefits include:
Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Parental Leave
401(k) Retirement Plan
Group Term Life and Travel Assistance
Voluntary Life and AD&D Insurance
Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
Transit and Parking Commuter Benefits
Short-Term & Long-Term Disability
Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Care.com annual membership
Employee Assistance Program
Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
Position may be eligible for a discretionary variable incentive bonus
