Department Summary:MITRE's Cloud Operations team is seeking a hands-on Senior Cloud Operations Engineer to deliver timely, effective, and sustainable capabilities across our AWS-based managed environments. In this role, you will provide end-to-end cloud operations and user support, including onboarding, account and access management, incident triage, and secure file-transfer services, helping ensure continued customer and mission success. You will be heavily involved in configuring and troubleshooting AWS infrastructure (IAM, networking, storage, load balancing, DNS, PKI/TLS, backups) and maintaining operational and security compliance through all phases of the system lifecycle. Additionally, you will develop automation and Ansible playbooks, collaborate with development teams, and drive continuous improvement of our cloud solutions and DevOps practices.
Roles & Responsibilities:Cloud Operations and User Support
- Provide PANACCEA onboarding/101 support, including helping users understand environment access, common workflows, and support procedures.
- Create and troubleshoot user accounts, access, authentication, and related identity issues; manage user entitlements.
- Support shared services and perform routine service health checks, access management, and incident triage.
- Perform secure manual file transfers and troubleshoot common file-transfer, permissions, and integrity issues.
- Provision standard AWS instances and resources using approved automated provisioning processes and validate successful deployment.
- Support certificate issuance, installation, validation, renewal, and basic PKI/TLS troubleshooting.
- Create, update, and validate DNS records and perform DNS/name-resolution checks using standard diagnostic tools.
- Document incidents, requests, troubleshooting steps, and resolutions; identify issues that require advanced escalation.
Advanced Cloud Engineering and Troubleshooting
- Troubleshoot AWS IAM roles, policies, permissions, trust relationships, and access-control issues using least-privilege principles.
- Configure and troubleshoot AWS security groups and related network controls, including ports, protocols, CIDR ranges, and traffic flow.
- Configure and support AWS Elastic Load Balancing, including ALB/ELB listeners, target groups, health checks, TLS termination, DNS integration, and associated security groups.
- Configure and troubleshoot Amazon EBS and EFS storage, including attachment/mounting, filesystems, NFS connectivity, encryption, and performance considerations.
- Configure backup policies, snapshots, retention, and restoration processes; perform and validate system and application restores.
- Configure and troubleshoot nonstandard EC2 instances, applications, services, dependencies, and supporting operating-system settings.
- Diagnose advanced infrastructure issues involving VPCs, subnets, route tables, security groups, NACLs, gateways, DNS, VPC endpoints, and end-to-end network paths.
- Create, maintain, test, and troubleshoot Ansible playbooks and related configuration-management artifacts.
- Develop scripts and automation to resolve recurring support tickets, reduce repetitive manual work, and improve reliability and supportability.
- Assist in identifying, analyzing, and resolving infrastructure and application deployment issues.
- Review existing systems and contribute recommendations for improvement to sponsors and internal teams.
- Collaborate with development teams to evaluate cloud solutions and support the implementation and operation of cloud-based solutions and DevOps practices.
Basic Qualifications:- Typically requires a minimum of 8 years of related experience with a Bachelor's degree; or 6 years and a Master's degree; or a PhD with 3 years' experience; or equivalent combination of related education and work experience.
- Experience with one or more commercial cloud offerings (AWS, Azure, Google Cloud, etc.), with hands-on AWS experience.
- Ability to complete Security+ training within one year.
- Experience with cloud-based solutions using DevOps tools (e.g., GitLab, GitHub, Jenkins, or similar).
- Experience with configuration management, infrastructure-as-code, cloud development frameworks, and build automation tools (e.g., Ansible, Chef, Terraform, AWS CDK, or similar).
- Working knowledge of cloud infrastructure fundamentals, including compute, identity and access management, TCP/IP networking, DNS, storage, and security controls.
- Basic Linux and/or Windows systems-administration skills and the ability to troubleshoot operating-system, application, permissions, and connectivity issues.
- Understanding of TLS/SSL certificates and basic PKI concepts.
- Understanding of containerization and orchestration technologies, including Kubernetes and Docker.
- Experience with DevOps practices and CI/CD.
- Strong troubleshooting and analytical skills, with the ability to methodically isolate and resolve technical issues.
- Good communication and collaboration skills, including the ability to document technical work and support users with varying levels of technical experience.
- Must have an active Top Secret U.S Government issued Security Clearance. Per the U.S. Government's eligibility requirements, you must be a U.S Citizen to be considered for a security clearance.
- This position has an on-site requirement of 5 days a week on-site.
Preferred Qualifications:- Active TS/SCI security clearance.
- 5+ years' experience with one or more commercial cloud offerings (AWS, Azure, Google Cloud, etc.), with hands-on AWS experience.
- Hands-on experience administering and troubleshooting AWS IAM, EC2, VPC networking, security groups, subnets, route tables, and related infrastructure services.
- Experience configuring or troubleshooting AWS ALB/ELB, EBS, EFS, and backup/restore capabilities.
- Experience developing and maintaining Ansible playbooks and using Git or another version-control platform.
- Experience automating operational tasks or recurring support fixes using Python, Bash, PowerShell, AWS CLI/SDKs, APIs, or similar tools.
- Experience with monitoring and diagnostic services such as AWS CloudWatch, CloudTrail, or VPC Flow Logs.
- Experience with Infrastructure as Code technologies such as Terraform, AWS CloudFormation, or AWS CDK.
- Experience with containerization and orchestration technologies, including Kubernetes and Docker.
- Fundamental understanding of databases and data concepts: SQL, ETL/ELT, and stream processing.
- Understanding of backup/recovery, high-availability, and disaster-recovery concepts, including RPO and RTO.
- Experience supporting enterprise, government, or other security-conscious cloud environments.
This requisition requires the candidate to have a minimum of the following clearance(s):Top Secret
This requisition requires the hired candidate to have or obtain, within one year from the date of hire, the following clearance(s):Top Secret/SCI
Salary compensation range and midpoint:$122,400 - $153,000 - $183,600 Annual
Work Location Type:Onsite
