Cloud Engineer - Level IV

Augustine Consulting Inc.•Fayetteville, NC

3h•Onsite

About The Position

Augustine Consulting, Inc. is a Woman-Owned Small Business professional services provider of engineering and technical services to the United States Government. We seek an experienced Cloud Engineer to serve as part of ACI’s Government Programs Team, which supports CPE Ground and the Nett Warrior system. This role provides technical leadership across on-premises, hybrid, and cloud infrastructures, including AWS and Azure, and serves as a Subject Matter Expert (SME) for secure network architecture, firewall implementation, administrative access, traffic flow analysis, troubleshooting, and cloud connectivity. A successful ACI Cloud Engineer will: Design, implement, and sustain enterprise network architectures across on-premises, hybrid, AWS, and Azure cloud environments Lead network engineering efforts through the full system lifecycle, including planning, design, implementation, testing, deployment, accreditation, and sustainment Serve as the senior technical authority (SME) for routing, switching, network security, secure communications, firewall architecture, and cloud networking design Engineer and maintain AWS and Azure cloud networking components, including VPCs, VNets, subnets, route tables, transit gateways, virtual WAN, ExpressRoute, Direct Connect, VPN gateways, peering, private endpoints, security groups, NSGs, load balancers, DNS services, NAT gateways, and hybrid interconnections Develop and enforce network standards, security baselines, firewall policies, segmentation strategies, access control requirements, and cloud network governance Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and Army 8140 requirements for privileged administrative access Analyze, document, and optimize end-to-end traffic flows across enterprise, tactical, and cloud environments to ensure secure routing, performance, resiliency, and mission effectiveness Provide technical oversight for DevSecOps and Infrastructure as Code (IaC) implementations supporting network automation and cloud network provisioning Lead advanced troubleshooting and root cause analysis for complex network, firewall, routing, latency, packet loss, and connectivity issues across multi-domain environments Support Authority to Operate (ATO) activities, including documentation, testing, remediation, and security validation A Cloud Engineer who fits our team is: Dynamic: contributes energy and enthusiasm to our daily tasks, to the team’s interactions, and to the Company’s mission. Thorough: possesses an unparalleled work ethic; produces complete, even polished products; persistent; mission-focused; asks “Why?” as often as necessary to get to the root of the matter. Mature: respects others’ opinions, beliefs, and culture; listens to ideas, shares thoughts, and works independently and together to contribute insights to the company’s leaders. Forthright: speaks with conviction; argues based on understanding, respectfully. Inquisitive: seeks deeper explanations of how systems work, not the surface-level description of the actors involved; goes beyond “stick-fetching” to connect the unconnected. Timely: shows up, ready to think, prepared to get on with the day’s assignments; contributes analytical insights that meet time-sensitive, reasonable requests. Honest: knows what’s right, what’s legal, what’s appropriate; acts accordingly.

Requirements

Due to the sensitive nature of this work, a Department of War (DoW) security clearance is required, and all applicants must provide proof of U.S. Citizenship.
Must currently possess or have the ability to obtain a DoW Secret security clearance.
Bachelor’s degree in a related field and 10 years of experience or, Master’s degree in a related field and five years of experience.
Extensive experience in enterprise network engineering, routing, switching, firewalls, and network security
Strong knowledge of DoW cybersecurity frameworks, including RMF, NIST 800-53, STIGs, and Zero Trust concepts
Experience with AWS and Azure cloud networking in hybrid enterprise environments
Knowledge of high-level cloud networking technologies, including VPC/VNet design, cloud routing, hybrid connectivity, private access, cloud-native security controls, DNS, load balancing, segmentation, and multi-region connectivity
Meets DoW 8140 requirements related to privileged access and administrator roles demonstrated understanding as they apply to privileged administrative access and cybersecurity workforce compliance
Proficiency with network protocols and technologies such as BGP, OSPF, MPLS, VLANs, VPNs, ACLs, NAT, and QoS
Strong experience troubleshooting network performance, traffic flow, firewall, and security issues
Experience with network automation and Infrastructure as Code tools such as Ansible and Terraform
Experience supporting DoW ATO and authorization processes

Nice To Haves

CCNP, CCIE, CASP+, CISSP, Security+, or similar certifications (within 90 days)
IAM/IAT certifications aligned with Army 8140 requirements
Advanced AWS and/or Azure certifications
Experience with enterprise firewalls, IDS/IPS, boundary defense technologies, and cloud-native network security platforms
Experience supporting tactical communications or DoW mission networks
Familiarity with ATAK, Nett Warrior, or similar operational systems
Experience supporting large-scale DoW programs in multi-contractor environments

Responsibilities

Design, implement, and sustain enterprise network architectures across on-premises, hybrid, AWS, and Azure cloud environments
Lead network engineering efforts through the full system lifecycle, including planning, design, implementation, testing, deployment, accreditation, and sustainment
Serve as the senior technical authority (SME) for routing, switching, network security, secure communications, firewall architecture, and cloud networking design
Engineer and maintain AWS and Azure cloud networking components, including VPCs, VNets, subnets, route tables, transit gateways, virtual WAN, ExpressRoute, Direct Connect, VPN gateways, peering, private endpoints, security groups, NSGs, load balancers, DNS services, NAT gateways, and hybrid interconnections
Develop and enforce network standards, security baselines, firewall policies, segmentation strategies, access control requirements, and cloud network governance
Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and Army 8140 requirements for privileged administrative access
Analyze, document, and optimize end-to-end traffic flows across enterprise, tactical, and cloud environments to ensure secure routing, performance, resiliency, and mission effectiveness
Provide technical oversight for DevSecOps and Infrastructure as Code (IaC) implementations supporting network automation and cloud network provisioning
Lead advanced troubleshooting and root cause analysis for complex network, firewall, routing, latency, packet loss, and connectivity issues across multi-domain environments
Support Authority to Operate (ATO) activities, including documentation, testing, remediation, and security validation