Cloud Data Engineer (Mid) - Clearance Required

LMI•San Diego, CA

5d•Hybrid

About The Position

LMI is seeking an AWS Cloud Data Engineer to support a Department of Defense data modernization effort hosted on a DoD-accredited cloud platform in AWS GovCloud. This role sits at the intersection of cloud data engineering and enterprise data architecture. The selected candidate will serve in a hands-on technical role responsible for designing, implementing, and validating a cloud-native data ingestion and persistence pipeline. This is a builder role: the work requires moving from architecture to implementation, producing a validated data path that becomes the repeatable standard for enterprise data consumers. This is not a traditional cloud advisory role. The selected candidate will operate at the intersection of: Cloud data engineering and pipeline implementation in AWS GovCloud DoD authorization environments - ATO, ICA, and security boundary coordination Multi-tenant data platform design and tenant onboarding. You will serve as the primary technical executor on a small, senior team, translating data requirements into working infrastructure on an accredited DoD cloud platform. LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed. Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value. This position can be remote with potential on-site requirements, but preference will be given to a San Diego, CA candidate. This position also requires an active DoD Secret clearance.

Requirements

Active Secret clearance
4+ years of hands-on AWS cloud engineering experience, with demonstrated work in AWS GovCloud environments
Proficiency with core AWS data and platform services: S3, Lambda, AWS Glue, RDS/Aurora, IAM, KMS, CloudTrail, CloudWatch, AWS Transfer Family
Experience designing and implementing data ingestion pipelines for structured file and API-based ingestion patterns
Familiarity with relational database design, schema management, and backup configuration in cloud environments
Working knowledge of DoD cloud authorization environments, including Impact Level constraints and ATO/ICA processes
Ability to operate independently in a fast-paced environment with government technical leads and platform security teams
AWS certifications: Solutions Architect, Data Engineer, or equivalent

Nice To Haves

TS/SCI eligibility
Experience supporting DoD programs up to IL6
Familiarity with AWS data catalog solutions, such as AWS Glue Data Catalog, Apache Atlas, or equivalent
Knowledge of DoD RMF, interconnection agreement (ICA/ISA) requirements, and ATO documentation processes
Experience onboarding a new tenant community into a shared, multi-tenant DoD cloud platform
SOF operator or SOF-support background with understanding of SOF core activities and mission sets

Responsibilities

Design, implement, and maintain ingestion paths for multiple data stream types including structured files and APIs from DoD on-premises sources into an S3-backed landing zone using an approved transfer mechanism (e.g., AWS Transfer Family SFTP or equivalent)
Design, implement, and maintain Lambda-based parsing functions that process incoming data and load structured output into a relational AWS database (Aurora or Amazon RDS)
Integrate AWS Glue (or similar technology) to support data transformation and pipeline orchestration within the accredited environment
Establish and document landing zone file handling patterns, such as raw, processed, rejected/error, and archive
Support relational database selection, schema design, and configuration (Aurora or RDS) aligned to multi-tenant data isolation requirements
Deploy and configure a data cataloging solution to support schema visibility, metadata management, and data discovery across tenant communities
Validate scheduled backup configuration for selected databases and relevant data stores
Coordinate with the platform security team on S3 encryption and access policy requirements, KMS key ownership, CloudTrail audit logging, and IAM role boundaries for tenant access
Support ATO and ICA activities, including documentation of the inbound data connection from external infrastructure into the cloud environment
Operate within IL4 and IL6 accredited environments, adhering to platform-established security controls and approval processes
Author Architecture Decision Records (ADRs) for key technical decisions made during program execution
Document the tenant onboarding operating model to capture access controls, data boundaries, shared services, cost visibility, and environment segmentation
Track issues, decisions, and open questions in GitLab in alignment with established project conventions