Classified Technical and Cloud Computing Engineer

The Aerospace Corporation•El Segundo, CA

22h•$152,000 - $228,000•Onsite

About The Position

The Aerospace Corporation’s Enterprise Information Services is responsible for its classified and unclassified enterprise IT environment. The Classified Technical and Cloud Computing Engineer designs, deploys, secures, and maintains Azure-based virtual enclaves in a classified environment. The role calls for expertise in Azure services, governance, security controls, and enclave operations within DoD- or IC-compliant architectures, with a focus on building compliant and resilient cloud solutions in high-security environments. The selected candidate will work full-time on-site at the facility in Colorado Springs, Colorado, or El Segundo, California. Domestic travel of 10% or less is required.

Requirements

Current TS/SCI clearance with SSBI and CI polygraph.
Current DoD 8570-compliant certification, such as Security+.
Bachelor’s degree in Computer Science, STEM, or IT.
5–8 years of Azure cloud engineering, administration, or architecture experience.
Hands-on experience deploying and maintaining virtual enclaves or isolated cloud environments.
Strong understanding of Azure networking, compute, storage, identity, security, and monitoring services.
Experience with infrastructure-as-code and automated deployment workflows.
Familiarity with NIST 800-53, RMF, STIGs, Zero Trust principles, and other federal compliance frameworks.
Ability to work in highly constrained, classified, or air-gapped environments.
Strong troubleshooting skills and ability to solve complex technical problems independently.
Ability to travel domestically 10% or less.

Nice To Haves

Azure certifications such as AZ-104, AZ-305, SC-100, or similar.
Experience with cross-domain solutions.
Familiarity with Kubernetes (AKS), container security, or enclave modernization patterns.
Experience implementing attribute-based access control (ABAC) in a classified environment using tools such as ManTech’s Sentris.
Familiarity and experience with Controlled Access Programs (CAP) and Special Access Program (SAP) environments.
Working knowledge of Protection Level (PL) 3 environments and incumbent IT requirements.

Responsibilities

Deploy, configure, and maintain Azure virtual enclaves to support mission applications and workloads in a classified environment.
Implement and enforce security, compliance, and governance policies aligned with DoD, IC, NIST, and organizational standards.
Manage virtual networks, subnets, firewalls, NSGs, routing, private endpoints, and cross-domain or cross-environment integrations.
Automate infrastructure provisioning and configuration using tools such as Terraform, Ansible, or Azure Automation.
Monitor cloud infrastructure for performance, security posture, availability, and compliance; perform root-cause analysis and remediation.
Implement identity and access controls using Entra ID, RBAC/ABAC, and Conditional Access policies.
Support enclave patching, logging, vulnerability mitigation, and configuration baselines.
Partner with cybersecurity teams on risk assessments, STIG compliance, audit activities, and ATO sustainment.
Maintain documentation covering architecture, deployment patterns, security controls, and operational procedures.
Provide technical support for enclave operations and cloud-related incidents.

Benefits

Comprehensive health care and wellness plans.
Paid holidays, sick time, and vacation.
Standard and alternate work schedules, including telework options.
401(k) plan with company-paid benefits of 8%, 10%, or 12% of eligible compensation based on years of service, plus matching contributions; employees are immediately eligible and vested upon hire.
Flexible spending accounts.
Variable pay program for exceptional contributions.
Relocation assistance.
Professional growth and development programs.
Education assistance programs.
Inclusive work environment built on teamwork, flexibility, and respect.