Cloud Engineer - Active Secret Clearance

TOMORROW HIRE•Washington, DC

1d•$100,000 - $145,000•Hybrid

About The Position

We are seeking a mission-driven Cloud Engineer to design, build, secure, and sustain cloud platforms and mission applications across AWS , Microsoft Azure , and/or DoD/FedRAMP -authorized environments. You will partner with cybersecurity, application teams, and stakeholders to deliver resilient, compliant, and cost‑optimized cloud services that support maritime safety, security, and stewardship.

Requirements

Active Secret clearance (required at time of application).
Bachelor’s degree in Business, IT, or a related field.
3-7+ years of hands-on cloud engineering or SRE experience in AWS and/or Azure (federal or enterprise).
Proficiency with Infrastructure as Code (Terraform preferred) and CI/CD pipelines.
Strong foundation in networking (TCP/IP, DNS, TLS, routing, VPNs), Linux/Windows , containers ( Docker , Kubernetes ), and git .
Experience implementing security controls aligned to NIST 800‑53 and FedRAMP.
Familiarity with RMF/ATO processes.
Scripting skills in Python , PowerShell , or Bash .
Ability to create clear documentation, diagrams, and runbooks; strong stakeholder communication skills.
Data services expertise (RDS/SQL MI, Postgres, KMS/Key Vault, Secrets Manager) and event-driven patterns (Kafka/Event Hub).
Must be able to reliably commute to Washington, D.C. 20032.

Responsibilities

Design secure, scalable landing zones, VNET/VPC architectures, and networking aligned to Zero Trust , and government policies.
Implement infrastructure as code ( Terraform , CloudFormation , Bicep ) and configuration management ( Ansible , SSM , Desired State Configuration ).
Create reusable modules/pipelines (CI/CD) in GitHub/GitLab/Azure DevOps for repeatable provisioning and blue/green deployments.
Engineer controls to meet FedRAMP, FISMA , and NIST SP 800‑53 requirements.
Stand up and manage container and serverless platforms ( EKS/AKS , ECS , Lambda , Azure Functions ) and PaaS services (databases).
Implement observability (logging, metrics, tracing) using CloudWatch , Azure Monitor , OpenTelemetry , or Synthetics.
Contribute to cloud governance standards, landing zone patterns, and best practices catalogs.
Partner with developers, cybersecurity, and mission owners to migrate/modernize systems (rehost/refactor/replatform).
Provide support, root-cause analysis, and knowledge transfer to operations teams.
Provide Tier I and Tier II Helpdesk Support to end users via phone, email, and ticketing systems.
Support user account management (Active Directory, permissions, and group policies)