Cloud Architect

Leidos•Ashburn, VA

3d•Onsite

About The Position

The U.S. Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a U.S. Government program responsible for preventing, identifying, containing, and eradicating cyber threats to CBP networks through monitoring, intrusion detection, and protective security services. This includes managing LAN/WAN, commercial internet connections, public-facing websites, wireless, mobile/cellular, various cloud environments, security devices, servers, and workstations. The CBP SOC is tasked with the overall security of CBP Enterprise-wide information systems and investigates and reports any suspected and confirmed security violations. We are seeking a skilled and motivated Cloud Administrator to join our growing team.

Requirements

5-7 years’ experience in a Cloud Engineering/Admin role or an equivalent of 3-5 years in Cybersecurity.
Hands-on experience with AWS, Microsoft Azure, GCP or other Cloud platforms. These may include EC2, Storage, Lambda, S3, VPC, Storage Gateways.
Experience with and knowledge of implementing Infrastructure-as-Code (IaC) using tools like Terraform, AWS CloudFormation, or Azure Resource Manager (ARM).
Ability to use scripting languages (e.g., PowerShell, Python) and cloud automation tools (e.g., Terraform, Ansible) to streamline provisioning, scaling, and maintenance tasks.
Experience with and ability to implement cloud security best practices, including identity and access management, data encryption, firewalls, and network security.
Hands-on experience with and knowledge of networking concepts (DNS, VPNs, load balancers, etc.) and cloud-based networking configurations.
Experience with orchestration tools like Ansible, Chef, or Puppet for configuration management.
Excellent troubleshooting skills.
Understanding of SOPs, Playbooks.
Bachelor’s degree and 8 years of related experience. Additional years of experience and cyber certifications may be considered in lieu of degree.
Familiar with the management, operational, and technical aspects of IT Security in a complex enterprise environment.
Deep working knowledge of public cloud providers (AWS, Microsoft Azure, Google Cloud) and services (compute, networking, storage, databases).
Strong written and oral communication skills with the ability to communicate with team members, management and customer.
Experience with Docker, Kubernetes, and container orchestration within a cloud environment.
Proficient in using Infrastructure-as-Code (IaC) tools like Terraform, AWS CloudFormation, or Azure Resource Manager (ARM) templates.
Solid understanding of cloud security practices, IAM, encryption, VPNs, firewalls, and security tools.
Proficiency in networking concepts and configurations, such as VPCs, subnets, VPNs, DNS, load balancers, and security groups.

Nice To Haves

Bachelor’s degree in computer science, Engineering, Software Development, Information Technology, Cyber Security, or related field.
AWS Certified Solutions Architect – Associate/Professional, Microsoft Certified: Azure Administrator Associate, Google Professional Cloud Architect, or equivalent certifications.
Ability to script in one more of the following computer languages Python, Bash, Visual Basic or PowerShell.
Experience with cloud monitoring tools (e.g., AWS CloudWatch, Azure Monitor, Datadog) and cost optimization strategies.
Expert experience and ability to immediately contribute to Automation Tasks and Infrastructure-as-Code tools and templates.
Top Secret clearance preferred.

Responsibilities

Manage, maintain, optimize, and deploy the organization’s cloud infrastructure.
Work closely with cross-functional teams to ensure the efficient and secure operation of cloud-based services, focusing on performance, scalability, and cost-effectiveness.
Manage cloud resources, troubleshoot issues, and ensure best practices are followed to maintain a high level of availability and reliability.
Design, develop, deploy, and manage the organization's cloud infrastructure, services, and security applications to ensure the environment is scalable, reliable, secure, and cost-effective.
Work with various cloud platforms such as AWS, Microsoft Azure, Google Cloud, and others.
Focus on day-to-day operations of the environment, handling tasks such as provisioning, monitoring, troubleshooting, and optimizing cloud resources and systems.
Ensure compliance with industry standards and internal policies.
Implement Continuous Integration/Continuous Deployment (CI/CD) pipelines for cloud infrastructure provisioning and deployment automation.
Resolve complex technical issues in a timely manner.
Create documentation.
Contribute to Automation Tasks and Infrastructure-as-Code tools and templates.