AWS Cloud Administrator

BAE Systems•Mount Laurel Township, NJ

1d•$118,095 - $200,762

About The Position

BAE Systems is seeking a Senior AWS Cloud Administrator to manage and operate classified and unclassified GovCloud AWS environments. This role supports the Advanced Technology team's SaaS application development and also contributes to protecting and defending the NSS classified SIPRNET environment. The administrator will coordinate with the on-site cybersecurity team and lead vendor and software license coordination. Key responsibilities include building and maintaining familiarity with cybersecurity operations, including cyber threat analysis, incident response, and vulnerability assessment across various systems like Windows Server, workstations, Cisco networking, Palo Alto firewalls, and enterprise security tools within the classified network. This position offers ownership of a growing AWS cloud environment, hands-on classified-network cybersecurity experience, breadth, autonomy, and visibility across both cloud and cybersecurity teams.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field and minimum 5 years of experience in cybersecurity, IT security, or related field, or equivalent military experience (Associate's degree with 7 years of experience also considered)
Current SECRET clearance
Hands-on experience administering AWS environments (EC2, S3, IAM, VPC, CloudTrail) supporting application development teams; AWS GovCloud experience strongly preferred given classified network context
Experience coordinating with software/license vendors and internal Program Management on license tracking, renewals, and software deployment
Current CompTIA Security+ CE certification
Cybersecurity certification demonstrating intermediate-to-advanced analysis skills (CySA+, GCIH, GCFA, or equivalent)
Working knowledge of Windows Server 2016/2019/2022 domain environments and Active Directory administration
Experience with SIEM platforms (Splunk preferred), log analysis, and event correlation
Understanding of network security principles with Cisco networking equipment (routers, switches, firewalls)
Experience with vulnerability scanning tools (Tenable Nessus or similar) and endpoint security/malware detection tools (Trellix ENS/ESS or similar)
Understanding of incident response principles and digital forensics concepts in Windows environments
Knowledge of STIG compliance requirements and DoD security baselines
Excellent written and verbal communication skills; demonstrated ability to translate technical requirements between distinct teams/stakeholders
Ability to work independently, manage competing priorities, and operate in high-pressure environments
Flexibility to work rotating shifts (including evenings, weekends, holidays) during the initial cybersecurity onboarding period as operational needs require

Nice To Haves

AWS certification (Solutions Architect – Associate, SysOps Administrator, or Security Specialty)
Familiarity with administering environments with Bedrock, Lambda, Step Functions, and Redshift services
Familiarity with software asset/license management platforms and vendor management workflows
Demonstrated success operating as a liaison or embedded resource between two functional teams
Military experience in cybersecurity, signals intelligence, or communications fields (25B, 35N, 17C, 35S)
Advanced DoD 8570.01-M IAT Level II/III certification (GCIH, GCFA, CISSP)
Advanced platform-specific certification (Splunk Power User/Admin), Cisco security certifications (CCNA Security, CyberOps), or Palo Alto certifications (PCNSA, PCCSA)
Experience with Palo Alto Networks firewall administration or similar next-generation firewall platforms
Basic scripting experience (PowerShell, Python, Bash) for security or cloud automation tasks
Understanding of DoD PKI implementation, CNSS policies, and NSS classification handling procedures
Prior experience supporting classified networks or SIPRNET connectivity requirements
Experience with DISA STIG implementation and compliance validation tools

Responsibilities

Serve as cloud administrator for the Advanced Technology team's AWS environment supporting active SaaS application development
Manage AWS accounts, IAM, networking (VPC), storage, and compute resources in a classified/GovCloud context, in coordination with security and compliance requirements
Work directly with software and services vendors, and with internal program management operations, to track license statuses, renewals, and costs, and to plan and execute new software installs and updates
Coordinate with the on-site cybersecurity team on requirements, current activities, and upcoming changes relevant to Advanced Technology's systems and development plans
Proactively surface upcoming cybersecurity policy, tooling, or compliance changes to the Advanced Technology team so development plans can adapt ahead of time
Maintain hands-on fluency in the cybersecurity team's environment and tooling — monitoring, detecting, analyzing, and responding to cyber threats — to communicate effectively on technical requirements and constraints