Senior Cloud Engineer

Leidos•Arlington, VA

33d•Remote

About The Position

The Leidos Digital Modernization Sector is seeking a highly capable Senior Cloud Engineer to spearhead cloud initiatives for the DHS CISA in Arlington, VA, please note this position is 100% remote. In this hands-on role, you’ll architect and develop scalable cloud-native solutions using AWS, Azure, and Python, while ensuring best practices across architecture, development, deployment, and security. The Security Cloud Engineer will support the design and development of cybersecurity tools and technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide systems and networks. Primary Responsibilities: Manage multiple assignments, changing priorities, and work independently with little oversight. Deploy and manage applications on cloud platforms such as AWS and Azure. Tackles large security projects, both of a technical and compliance nature. The senior cloud engineer is expected to tackle difficult technical issues and changes with minimal oversight. Conduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as required. Documentation, Visio Diagrams and reporting along with presentation, teamwork and DHS wide collaboration are among the expected duties and mission of the task order. Hardware and software installations, upgrades, maintenance, security analysis and network performance and tuning of Windows and Linux servers in a virtual infrastructure. Define system security & design requirements to meet FISMA and FedRAMP compliance standards. Communicate with other technical leads, IT groups, and customer reps so they understand all aspects of proposed changes/solutions. Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment and process improvement initiatives. Superior attention to detail with excellent written and verbal communication, problem solving, researching and follow-up skills. Design, implement, and maintain CI/CD pipelines for secure, automated software delivery. Develop infrastructure as code (IaC) using tools such as Terraform, Ansible, or CloudFormation. Implement automated security tools for vulnerability scanning, static/dynamic application security testing (SAST/DAST), and container security. Configure and optimize container orchestration platforms (e.g., Kubernetes, Docker). Mentor junior team members and contribute to continuous improvement of DevSecOps practices.

Requirements

BS degree in Science, Technology, Engineering or related field and 10+ years of prior relevant experience with a focus on cybersecurity OR Masters with 8+ years of prior relevant experience; additional years of experience will be accepted in lieu of a degree.
Experience installing, configuring, securing, and troubleshooting Microsoft Windows Server and Red Hat Enterprise Linux.
Extensive automation experience with PowerShell and Shell Scripting for automating repeatable tasks and installations.
Experience managing Active Directory (AD), Azure Active Directory, AD FS, single sign-on using SAML and Group Policy management.
Perform analysis of security posture by reviewing vulnerability and compliance scans and making recommendations for remediations and managing POA&Ms.
Excellent problem solving, research, and follow-up skills.
Minimum 5+ years of Administration experience with cloud-based applications (MS O365, SharePoint, Azure AD, AWS).
Hands-on experience with containerization and orchestration (e.g., Docker, Kubernetes).
Solid understanding of networking, Linux/Unix systems, and version control systems (e.g., Git).
Experience managing Azure Firewalls, AWS Network Firewall, AWS Network ACLs, AWS security groups, Azure network security groups, and related resources.
Solid understanding of developing and leveraging CI/CD pipelines (Continuous Integration/Continuous Deployment).
Candidate must, at a minimum, meet one of these certifications: CISSP, CCSP, MCSE, AWS Certified DevOps Engineer, Certified AWS SysAdmin, AWS Certified Advanced Networking, Azure Solutions Architect, Expert Azure Developer Associate.
Clearance: This position requires candidates to obtain a Public Trust security clearance.

Nice To Haves

Experience with Wiz, Axonius, Crowd Strike, Nucleus, and Network/Endpoint security tools.
Experience working with SIEM tools such as Splunk to ingest, normalize, store, and maintain data from endpoint, network, and application sourcetypes is a plus.
Experience working in an Agile environment and familiarity with Agile project management practices is a plus.

Responsibilities

Manage multiple assignments, changing priorities, and work independently with little oversight.
Deploy and manage applications on cloud platforms such as AWS and Azure.
Tackles large security projects, both of a technical and compliance nature.
Conduct periodic architectural reviews of installed sensors to assess effectiveness and propose optimal installation alternatives as required.
Documentation, Visio Diagrams and reporting along with presentation, teamwork and DHS wide collaboration are among the expected duties and mission of the task order.
Hardware and software installations, upgrades, maintenance, security analysis and network performance and tuning of Windows and Linux servers in a virtual infrastructure.
Define system security & design requirements to meet FISMA and FedRAMP compliance standards.
Communicate with other technical leads, IT groups, and customer reps so they understand all aspects of proposed changes/solutions.
Provide follow-up reports (technical findings, feedback, resolution steps taken) for Root Cause analysis, engineering technical assessment and process improvement initiatives.
Design, implement, and maintain CI/CD pipelines for secure, automated software delivery.
Develop infrastructure as code (IaC) using tools such as Terraform, Ansible, or CloudFormation.
Implement automated security tools for vulnerability scanning, static/dynamic application security testing (SAST/DAST), and container security.
Configure and optimize container orchestration platforms (e.g., Kubernetes, Docker).
Mentor junior team members and contribute to continuous improvement of DevSecOps practices.