Cloud Engineers, Senior Engineers, Architects & Automation Specialists (CBP)

Agile Defense•Ashburn, VA

16h•Hybrid

About The Position

U.S. Customs and Border Protection (CBP) requires continuous operations across numerous ports of entry, land, air, and sea, as well as Border Patrol stations and the Air and Marine Operations Center. The applications supporting these operations are critical and cannot experience downtime. This role involves building and managing the environments for these essential applications, focusing on infrastructure as code, deployment pipelines, identity and access management, monitoring, resilience, and cost optimization. Collaboration with network engineers, security staff, and field teams is essential. The work is governed by federal accreditation processes, requiring designs to be security-reviewable. Integration with legacy systems that predate cloud technology is also a significant part of the role.

Requirements

Active CBP Background Investigation (CBP BI) and EOD strongly preferred.
U.S. Citizenship required.
Experience running production workloads in a government cloud environment.
Experience writing infrastructure as code that others can use independently.
Experience taking a system through a federal authorization process.
Experience integrating cloud services with legacy systems.
Active CBP BI, a fitness determination at another DHS component, or an active DoD clearance.
Comfort working with tooling across more than one cloud platform.
Cloud platform and security certifications are useful but not a substitute for experience.

Nice To Haves

An active CBP BI and EOD will shorten your start date and include a $10,000 signing bonus.
Candidates who do not hold an active CBP BI can begin processing for one.

Responsibilities

Stand up cloud environments that can withstand continuous operational load and degrade gracefully rather than failing completely.
Ensure telemetry provides clear insights into issues for on-call personnel.
Manage capacity and cost decisions proactively.
Replace manual work with automation that is trusted and auditable.
Ensure environments are rebuilt from code that accurately reflects the running state.
Implement unattended deployments where automation succeeds reliably.
Ensure automation failures are visible and leave a traceable trail.
Develop shared tooling that eliminates the need for private scripts.
Design security controls proactively rather than retrofitting them.
Generate evidence for control assessments from the pipeline.
Clearly explain changes and their security implications to security reviewers.
Own pipelines and tooling for the team (Automation Specialist).
Decide on automation strategies and the timing for removing manual steps (Automation Specialist).
Own a service, environment, or workload, making routine build and configuration decisions (Cloud Engineer).
Bring consequential build and configuration decisions to review (Cloud Engineer).
Address problems without clear answers, including those spanning network and security (Senior Cloud Engineer).
Provide guidance to other engineers on their approaches (Senior Cloud Engineer).
Set patterns for others to build against (Cloud Architect).
Ensure patterns align with operational and accreditation realities (Cloud Architect).