AWS Cloud Engineer – Digital Asset Management (Top Secret)

CGI•Fairfax, VA

8d•Onsite

About The Position

CGI Federal is seeking a technically strong, adaptable Cloud Engineer to support a federal law enforcement client’s classified digital asset modernization initiative. The role engineers secure cloud environments that enable deployment of a next-generation Digital Asset Management platform. The position is based in Washington, DC, or Fairfax, VA, and requires an active Top Secret clearance. The engineer will deploy and support cloud infrastructure across classified and unclassified environments, build secure ingestion workflows, configure cloud resources, and help sustain and troubleshoot the platform. The role involves collaboration with technical, security, and functional stakeholders, as well as participation in testing, documentation, engineering reviews, and classified planning sessions.

Requirements

At least 3 years of experience in cloud engineering, infrastructure support, or related technical roles; hands-on AWS experience is preferred.
Active Top Secret clearance.
Bachelor’s degree in computer science, information systems, engineering, or a related field; equivalent experience is considered.
Hands-on experience deploying or supporting AWS solutions, including networking, IAM, monitoring, and automation.
Understanding of cloud architecture principles, including VPC design, access control, encryption, multi-account structures, and secure cloud patterns.
Experience supporting containerized workloads such as ECS, EKS, or Docker.
Strong troubleshooting skills across infrastructure, data pipelines, and application environments.
Ability to learn new technologies quickly and work effectively in evolving mission and technology landscapes.
Strong communication skills and ability to collaborate across engineering, functional, and security teams.
Ability to work in structured environments with formal documentation, configuration management, and governance expectations.

Nice To Haves

Experience working in GovCloud, high-side cloud environments, or secure enclaves.
Familiarity with file-based ingestion workflows, ETL/ELT pipelines, or structured data integration methods.
Experience with infrastructure as code, such as Terraform or CloudFormation.
Understanding of security frameworks, boundary protection, and compliance considerations in classified environments.
Exposure to financial systems, digital assets, or accounting workflows; not required.
Experience supporting multi-tenant or multi-agency deployments.
Familiarity with CI/CD, AWS CodeCommit, secure container deployment pipelines, or DevSecOps models.
Experience collaborating with cybersecurity or ISSO/ISSM teams, or supporting ATO processes.

Responsibilities

Support deployment and configuration of cloud infrastructure for a Digital Asset Management solution across classified and unclassified cloud environments, following secure engineering standards.
Build and maintain ingestion pipelines using structured file exchange workflows, automation, and monitoring, in accordance with secure data transfer models and boundary controls.
Implement and configure cloud resources, including VPCs, IAM roles, networking boundaries, logging, monitoring, encryption, and container services, consistent with approved patterns and high-side security requirements.
Collaborate with functional, engineering, and security stakeholders to align cloud architecture with mission, performance, and compliance needs.
Assist with environment provisioning, multi-account setups, secure network configurations, and adherence to enclave access rules.
Troubleshoot and resolve issues involving cloud deployments, container execution, secure data transfers, and platform integrations across low-side and high-side environments.
Participate in technical testing, including end-to-end validation, regression testing, and classified environment readiness checks.
Create and maintain operational documentation, deployment procedures, cross-domain workflow notes, and security-driven configuration records.
Support sustainment activities such as configuration updates, ingestion pipeline tuning, cloud optimization, and environment monitoring.
Provide technical input during stakeholder workshops, engineering reviews, and classified planning sessions.