Automation / Cloud Services Engineer

Lumbee Tribe Holdings, Inc. • Camp Pendleton North, CA

4d • $100,000 - $125,000 • Onsite

About The Position

The Automation / Cloud Services Engineer supports the Marine Corps Tactical Systems Support Activity (MCTSSA) Infrastructure and Information Services Division (I2SD) by designing, deploying, and maintaining secure private, hybrid, and multi-cloud infrastructure that hosts critical Command, Control, Communications, Computers, Cyber, and Intelligence (C5I) applications for engineering, test, and experimentation. The individual is responsible for installing, configuring, patching, and administering the VMware Cloud Foundation (VCF) private cloud (vSphere, vSAN, NSX, and Aria Suite) in a Department of War (DoW) IL5-compliant environment, enforcing NSX micro-segmentation to realize Zero Trust objectives, and maintaining continuous compliance with DISA STIGs.
The engineer architects and implements resilient hybrid-cloud and container-orchestration frameworks (such as Kubernetes, Tanzu, and OpenShift) spanning on-premises private clouds and DoW-approved public clouds (AWS, Azure, and GCP), and provisions multi-tenant virtual machines, containerized workloads, and serverless architectures across development, test, and production enclaves in accordance with DoW Secure Cloud Computing guidelines. The individual builds and maintains an Infrastructure-as-Code (IaC) and configuration management framework using Ansible, Terraform, and CI/CD pipelines to automate provisioning, configuration compliance, and application deployment, committing all source code daily to the Government Git/GitLab repository.
The engineer provides continuous monitoring, governance, and cost optimization of hybrid-cloud infrastructure to sustain greater than 99.9% availability, and produces version-controlled documentation, blueprints, and README files that allow the Government to rebuild any environment from bare metal to operational status. The role also supports assigned test events, contributes to System Security Plans (SSPs) and related cybersecurity documentation, and provides technical representation at working groups and meetings as required.

Requirements

• Five years of hands-on experience designing, deploying, and administering enterprise virtualization and cloud infrastructure, preferably within DoD/DoW environments.
• Hands-on experience installing, configuring, patching, and administering VMware Cloud Foundation (VCF) components, including vSphere, vSAN, NSX, and Aria Suite, and implementing NSX micro-segmentation policies.
• Experience architecting, deploying, and securing container-orchestration platforms such as Kubernetes, VMware Tanzu, or Red Hat OpenShift, including hardening containers to the DoW Container Hardening Guide.
• Experience designing and operating secure, multi-tenant hybrid and multi-cloud architectures in at least one DoW-approved public cloud (AWS, Azure, or GCP), including cloud-native and on-premises service meshes for secure service-to-service communication.
• Proficiency developing, testing, and maintaining declarative automation code (Ansible playbooks, Terraform configurations) for network devices (Arista and Cisco switches), virtual hosts, and operating systems.
• Experience building and maintaining CI/CD pipelines and source control workflows using Git/GitLab to automate testing and deployment.
• Administrator-level knowledge of Windows Server, Red Hat Enterprise Linux, and VMware ESXi, including patching, DISA STIG hardening, and integration with enterprise storage, backup systems, and Active Directory/LDAP services.
• Working knowledge of Zero Trust Architecture principles (NIST SP 800-207) and DoW IL5/IL6 cloud security requirements.
• Experience using cloud monitoring suites to track resource utilization, scale instances to handle traffic spikes, cost-optimize resources, and maintain high availability (greater than 99.9%).
• Proficiency in scripting languages such as Python, PowerShell, and Bash to automate repetitive tasks.
• Familiarity with the Risk Management Framework (RMF) and developing System Security Plans (SSPs) and related cybersecurity documentation.
• Strong written and verbal communication skills, including the ability to produce clear, version-controlled technical documentation, system blueprints, and operational guides, and to explain complex technical topics to non-technical audiences.
• Possess a DoD 8140-compliant certification appropriate for privileged system access (e.g., CompTIA Security+ CE or higher) upon onboarding.
• Possess one of the following certifications upon onboarding: VMware Certified Professional – VMware Cloud Foundation Administrator (VCP-VCF Admin), AWS Certified Solutions Architect – Associate, Microsoft Certified: Azure Administrator Associate, Certified Kubernetes Administrator (CKA), Red Hat Certified Engineer (RHCE).
• Obtain one of the following certifications within 9 months of onboarding: HashiCorp Certified: Terraform Associate, Certified Kubernetes Security Specialist (CKS), AWS Certified Solutions Architect – Professional, Microsoft Certified: Azure Solutions Architect Expert.
• Possess an active SECRET clearance and maintain it throughout employment.
• This position may be designated IT-I or IT-II, which requires a favorably adjudicated Tier 5 or Tier 3 investigation, respectively.

Nice To Haves

• Advanced expertise in private, hybrid, and multi-cloud architecture, virtualization, and container orchestration within secure DoW environments.
• Automation-first mindset.
• Ability to translate manual processes into repeatable Infrastructure-as-Code and CI/CD workflows that reduce provisioning time and eliminate configuration drift.
• Ability to apply Zero Trust and DISA STIG requirements to every layer of the environment.
• Ability to troubleshoot complex issues methodically.
• Ability to document work so thoroughly that the Government can reconstruct any environment independently.

Responsibilities

• Designing, deploying, and maintaining secure private, hybrid, and multi-cloud infrastructure.
• Installing, configuring, patching, and administering the VMware Cloud Foundation (VCF) private cloud (vSphere, vSAN, NSX, and Aria Suite).
• Enforcing NSX micro-segmentation to realize Zero Trust objectives.
• Maintaining continuous compliance with DISA STIGs.
• Architecting and implementing resilient hybrid-cloud and container-orchestration frameworks (such as Kubernetes, Tanzu, and OpenShift).
• Provisioning multi-tenant virtual machines, containerized workloads, and serverless architectures.
• Building and maintaining an Infrastructure-as-Code (IaC) and configuration management framework using Ansible, Terraform, and CI/CD pipelines.
• Committing all source code daily to the Government Git/GitLab repository.
• Providing continuous monitoring, governance, and cost optimization of hybrid-cloud infrastructure.
• Producing version-controlled documentation, blueprints, and README files.
• Supporting assigned test events.
• Contributing to System Security Plans (SSPs) and related cybersecurity documentation.
• Providing technical representation at working groups and meetings as required.

Benefits

• Salary will be determined based on the individual's education and experience level.
• Employees will receive detailed information about benefit plan terms, conditions, and eligibility during onboarding.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed