Cloud Engineer

Tria Federal•Suitland, MD

3h•Onsite

About The Position

Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow. We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply. Tria Federal supports the Department of Labor, Bureau of Labor Statistics (DOL BLS). In this position you will be responsible for supporting cloud infrastructure development, cloud operations, and cloud environment administration across the BLS Cloud Landing Zone (CLZ) and Microsoft 365 tenant. You will perform all the duties of a Cloud Engineer 2 with increased technical proficiency and working knowledge. Additionally, you may lead and coach lower-level personnel to ensure proper cloud governance, automation, system security, cost efficiency, and operational reliability in accordance with BLS standards and procedures.

Requirements

Bachelor’s degree or 6 years of relevant cloud engineering experience
Must be a U.S. Citizen or Green Card Holder who has resided in the U.S. for the past 3.5 years
Five (5) years of progressive experience covering cloud engineering responsibilities such as: Cloud infrastructure implementation, operations, and administration within AWS and/or Azure environments Managing multi-account cloud strategies, VPC/network topology, access management, and compliance guardrails Supporting enterprise cloud solutions using PowerShell, automation scripting, and platform administration Managing Microsoft 365 services including AD/Cloud Identities, Exchange, Teams, ADFS, and Intune
Three (3) years of hands-on experience with: Infrastructure as Code (IaC) tooling such as AWS CloudFormation, Terraform, or ARM templates DevOps and CI/CD integrations for automated deployments and cloud resource provisioning Implementing security, compliance, and cloud policy enforcement aligned to frameworks such as NIST 800-53 Rev 5
Two (2) years of experience in: Cloud cost analysis, cost anomaly reporting, and cost mitigation recommendations (FinOps practices) Power Platform administration including environment management, solution deployment, and security configuration Cloud change management and documentation requirements (LANCM or equivalent)
Understanding of IAM policies, identity security, encryption, ADFS integrations, ACLs, and regulatory compliance controls
Ability to automate operational workflows using Python, Bash, PowerShell, or similar tools
Experience maintaining security monitoring and auditing (CloudTrail, CloudWatch, Security Hub, etc.)
Strong written communication including updating runbooks, SOPs, DR plans, and configuration documentation
ABILITY TO OBTAIN A DOL PUBLIC TRUST CLEARANCE (Must be a U.S. Citizen or Green Card Holder residing in the United States for more than 3.5 years

Nice To Haves

AWS Solutions Architect Associate, AWS SysOps, Azure Administrator, Azure Solutions Architect, Security+, or similar cloud certifications

Responsibilities

Maintain the health, security, and operational efficiency of the BLS Cloud Landing Zone (CLZ) and Microsoft cloud tenants
Support transition of on-premise applications to cloud-based alternatives within the CLZ
Perform automated infrastructure provisioning using IaC and remediate configuration drifts
Manage AWS Organizations, Service Control Policies (SCPs), guardrails, and shared services infrastructure
Integrate cloud environments with CI/CD pipelines for automated deployments
Implement security best practices, including IAM hardening, logging, encryption, and network access controls
Review and mitigate security, compliance, and configuration findings within required timelines
Review cost anomaly alerts and consumption reports; recommend mitigation strategies
Support cloud architecture request tickets and provide designs within required SLAs
Manage tenant access, configuration, and administration across Microsoft 365 services
Lead Power Platform implementation, testing, and integration planning activities
Update system documentation, runbooks, SOPs, and disaster recovery materials within defined timelines
Troubleshoot and resolve cloud infrastructure, security, deployment, and identity issues
Enforce change control procedures using LANCM for all cloud system modifications except emergencies

Benefits

What defines the Tria brand is more than just our dedication to excellence in our craft; it’s our incredible team of dedicated, talented, and passionate people that make Tria so exceptional. As people powering possible, we are all partners in our team’s shared success.
As a company that cares about people, we seek to cultivate a culture in which all can thrive personally and professionally. We offer a top-tier benefits package to invest in your physical, mental, and financial health and wellness so that you can be your best self - at work and in life. At Tria, we are growth-minded, entrepreneurial in spirit, and committed to fostering a culture of inclusion and opportunity for all. Whatever your background, your role, your department, or stage in your professional journey, here you will have opportunities to learn new skills, seize new challenges, and advance your career as we grow.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume