Cloud Engineer

Booz Allen Hamilton•Annapolis Junction, MD

18d

About The Position

As a Cloud Engineer, you will help modernize managed cloud platforms and IT infrastructure to support client missions. You will collaborate with cloud architects and engineers working across Amazon Commercial, GovCloud, and Azure to build, evolve, maintain, and secure cloud solution components. The role uses a DevOps framework to create and manage container applications, including with Kubernetes, and involves partnering with stakeholders and teammates to deliver technical solutions. Work may include modernizing legacy computing platforms and applications or developing new ones.

Requirements

At least 5 years of experience engineering and operating AWS cloud infrastructure, including multi-account networking with VPCs, Transit Gateway, centralized egress, and inspection.
At least 3 years of experience designing and operating enterprise networks, including BGP routing, IPsec site-to-site VPNs, DNS, and IP address planning across overlapping environments.
At least 3 years of experience automating network and infrastructure changes, including route tables, firewall rules, and IP allocation, using Terraform, AWS CDK, or Python through pull request–based CI/CD pipelines.
At least 2 years of experience deploying and administering F5 BIG-IP, including LTM or Advanced Web Application Firewall (WAF), in a cloud or hybrid environment.
At least 2 years of experience administering network firewalls, including AWS Network Firewall and Palo Alto Networks, and enforcing egress allowlists.
Experience integrating network and security device logs with Splunk, including HTTP Event Collector or syslog ingestion, and building searches and dashboards for network operations.
Experience using AI coding assistants or agents, including Claude Code or GitHub Copilot, in daily engineering work, and reviewing and validating AI-generated infrastructure code before release.
Bachelor’s degree in Computer Science or Information Systems.
DoD 8140 IAT Level II certification, such as Security+ CE.

Nice To Haves

Experience supporting DoD Impact Level 5, FedRAMP High, or other accredited environments in AWS GovCloud, including FIPS endpoints.
Experience building hybrid connectivity between AWS, Azure, and on-premises networks, including AWS Direct Connect, Azure ExpressRoute, or VPN gateways.
Experience migrating environments with overlapping IP space, including re-addressing, Network Address Translation (NAT), and DNS cutovers with minimal downtime.
Experience with IP address management tools, including Amazon VPC IPAM or Infoblox.
Experience with private DNS and service connectivity, including Route 53 Resolver, private hosted zones, and VPC interface endpoints.
Experience with Kubernetes networking, including Amazon EKS VPC CNI, ingress controllers, and network policy.
Knowledge of DoD cloud boundary architecture, including SCCA and Boundary Cloud Access Point concepts, or CMMC and NIST SP 800-53 network controls.
AWS Certified Advanced Networking – Specialty, F5 Certified BIG-IP Administrator, Palo Alto Networks PCNSE, or Cisco CCNP certification.

Responsibilities

Build, evolve, maintain, and secure cloud solution components.
Engineer and operate cloud infrastructure and enterprise networks.
Automate network and infrastructure changes through pull request–based CI/CD pipelines.
Deploy and administer F5 BIG-IP and administer network firewalls.
Integrate network and security device logs with Splunk and build searches and dashboards for network operations.
Create and manage container applications using DevOps practices and products such as Kubernetes.
Collaborate with cloud architects, engineers, stakeholders, and teammates to deliver technical solutions.
Modernize legacy computing platforms and applications or create new ones.