Cloud Engineer

Booz Allen Hamilton•Annapolis Junction, MD

5d•$86,900 - $198,000•Hybrid

About The Position

As a Cloud Engineer at Booz Allen, you will help clients modernize IT infrastructure and support mission needs by building, evolving, maintaining, and securing cloud solution components. You will collaborate with cloud architects and engineers working with Amazon Commercial, GovCloud, and Azure platforms. Within a DevOps framework, you will create and manage container applications and use Kubernetes, while partnering with stakeholders and teammates to deliver technical solutions. Work may involve modernizing legacy platforms and applications or creating new ones.

Requirements

At least 5 years of experience engineering and operating AWS cloud infrastructure, including multi-account networking with VPCs, Transit Gateway, and centralized egress and inspection.
At least 3 years of experience designing and operating enterprise networks, including BGP routing, IPsec site-to-site VPNs, DNS, and IP address planning across overlapping environments.
At least 3 years of experience automating network and infrastructure changes, including route tables, firewall rules, and IP allocation, using Terraform, AWS CDK, or Python delivered through pull request-based CI/CD pipelines.
At least 2 years of experience deploying and administering F5 BIG-IP, including LTM or Advanced Web Application Firewall (WAF), in a cloud or hybrid environment.
At least 2 years of experience administering network firewalls, including AWS Network Firewall and Palo Alto Networks firewalls, and enforcing egress allowlists.
Experience integrating network and security device logs with Splunk, including HTTP Event Collector or syslog ingestion, and building searches and dashboards for network operations.
Experience using AI coding assistants or agents, such as Claude Code or GitHub Copilot, in daily engineering work and reviewing and validating AI-generated infrastructure code.
Bachelor’s degree in Computer Science or Information Systems.
DoD 8140 IAT Level II certification, such as Security+ CE.

Nice To Haves

Experience supporting DoD Impact Level 5, FedRAMP High, or other accredited environments in AWS GovCloud, including FIPS endpoints.
Experience building hybrid connectivity between AWS, Azure, and on-premises networks, including AWS Direct Connect, Azure ExpressRoute, or VPN gateways.
Experience migrating environments with overlapping IP space, including re-addressing, Network Address Translation (NAT), and DNS cutovers with minimal downtime.
Experience with IP address management tools, including Amazon VPC IPAM or Infoblox.
Experience with private DNS and service connectivity, including Route 53 Resolver, private hosted zones, and VPC interface endpoints.
Experience with Kubernetes networking, including Amazon EKS VPC CNI, ingress controllers, and network policy.
Knowledge of DoD cloud boundary architecture, including SCCA and Boundary Cloud Access Point concepts, or CMMC and NIST SP 800-53 network controls.
AWS Certified Advanced Networking – Specialty, F5 Certified BIG-IP Administrator, Palo Alto Networks PCNSE, or Cisco CCNP certification.

Responsibilities

Build, evolve, maintain, and secure cloud solution components.
Engineer and operate AWS cloud infrastructure, including multi-account networking.
Design and operate enterprise networks, including routing, VPNs, DNS, and IP address planning.
Automate network and infrastructure changes through pull request-based CI/CD pipelines.
Deploy and administer F5 BIG-IP and administer network firewalls.
Integrate network and security device logs with Splunk and build searches and dashboards for network operations.
Collaborate with cloud architects, engineers, stakeholders, and teammates to deliver technical solutions.
Create and manage container applications and use Kubernetes within a DevOps framework.
Review and validate AI-generated infrastructure code before it is released.