AWS Cloud Engineer (Zero Trust Focus)

Na Ali'i Consulting & Sales, LLC.•Arlington, VA

16d•Hybrid

About The Position

Nakupuna is seeking an Amazon Web Services (AWS) Cloud Engineer with expertise in Zero Trust principles to join their team. This role is primarily focused on operations within an AWS GovCloud and Microsoft Windows Server 2022 environment. The engineer will provide support and expertise for the management and administration of AWS services, aligning with Zero Trust organizational goals. A key responsibility is ensuring that current and planned system architectures comply with the Department of Defense Information Network (DoDIN) security posture. The role will be instrumental in guiding the customer towards a Zero Trust posture.

Requirements

Excellent technical, organizational, decision-making, analytical, and planning skills
Effective communicator who takes initiative and the ability to adapt to dynamic environments
Experience developing AWS solutions using AWS Cloud Development Kit (CDK)
Experience writing and debugging Python scripts with Object Oriented Programming experience a plus
Experience with design and development of high availability virtual platforms
In-depth performance monitoring of virtual system(s)
Must excel at system documentation, to include in-depth system configuration, topology, and development of standard operating procedures
Bachelor’s degree in a STEM field from an accredited institution, or equivalent years of related work or military experience
Minimum of 3 years of relevant professional experience, including systems administration and cloud operations
Active IAT II Certification which may include CompTIA Advanced Security Practitioner (CASP+), CompTIA Cybersecurity Analyst (CySA+), Certified Information Systems Security Professional (CISSP), or CompTIA Security+
AWS certification (e.g., AWS Certified AI Practitioner, AWS Certified Cloud Practitioner, AWS SysOps Administrator Associate, AWS Solutions Architect Associate)
Must currently have at least a Top-Secret level security clearance
Must be a U.S. citizen

Nice To Haves

Experience supporting DoD IT environments preferred
Experience using Agile methodologies and ticketing systems such as JIRA is desirable

Responsibilities

Provision and configure AWS services using AWS Cloud Development Kit (CDK) Infrastructure as Code (IAC)
Provision and configure data and log transformation pipelines using AWS Lambda, FireHose, Glue, and other services
Build log mappings from application-native formats to OCSP standardized log format with the aid of AI tools
Write and debug AWS Lambda functions to automate operational and security processes
Lead discovery and prototyping efforts using artificial intelligence and machine learning services available in AWS, such as Amazon SageMaker, Comprehend, and Recognition
Identify, evaluate, and recommend emerging AWS-native AI/ML tools and services to enhance automation, analytics, and operational efficiency
Evaluate and integrate Zero Trust security frameworks into existing and new AWS system architectures
Implement and maintain Zero Trust Architecture principles, including least-privilege access, continuous authentication, and micro-segmentation within AWS environments
Collaborate with project stakeholders and cross-functional teams to manage cloud-related initiatives from planning through execution
Perform regular operational tasks in the AWS Console including creating new Amazon Elastic Compute Cloud (Amazon EC2) instances, debugging connectivity, provisioning users, managing credentials, configuring backup policies, and reviewing logs
Provide programmatic support including coordination, scheduling, budget tracking, and oversight of AWS infrastructure initiatives to ensure alignment with organizational objectives
Configure and manage EC2 management tools like AWS Config, Systems Manager, and Patch Manager
Support DevSecOps implementation and team integration including automated testing, release pipelines, automated deployment, with AWS CodePipeline and its related components
Support migration to serverless AWS offerings with the goal of reducing operational footprint on EC2 instances
Provide technical support and troubleshooting assistance
Perform system security hardening per DoD Security and Technical Implementation Guidelines (STIG) and provide required security documentation
Provide STIG guidance and assist in configuring computer and network devices
Support Information Assurance Vulnerability Alert (IAVA) patching requirements for servers and systems
Develop and maintain documentation including Standard Operating Procedures (SOPs)
Perform upgrades to server operating systems and applications
Assist technicians to maintain existing AWS Gov Cloud installation