Senior Cloud Operations Engineer

Pantheon Data • Reston, VA

6d • $82,000 - $190,000 • Remote

About The Position

Pantheon Data is seeking a Senior Cloud Operations Engineer to build, operate, and continuously improve the AWS GovCloud infrastructure hosting ML-enabled workloads and applications for federal clients. The role owns the cloud foundation and its day-to-day operation, including multi-account structure, networking, compute, data services, observability, backup and recovery, and cost management. The infrastructure must be reliable, well documented, and ready to support FedRAMP High and DoD IL4/IL5 workloads.

The engineer will work closely with the DevSecOps Engineer, who owns CI/CD and Kubernetes delivery, and the Cloud Security Engineer, who sets security standards and monitors controls. Applicants should be able to describe production environments they personally built and operated, including architecture, monitoring, incidents, and automation.

The position is listed as remote in Reston, Virginia. Remote or hybrid employees may periodically work from a Pantheon Data office or client site when required. Candidates local to the area should be prepared for an in-person interview; candidates outside the area may be considered for a virtual interview. Applicants must be able to obtain and maintain a Secret clearance; an active Secret clearance is preferred. The listed salary range is $82,000–$190,000, with actual compensation dependent on experience, geographic location, and possibly contractual requirements.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical field from an accredited university, or equivalent professional experience.
• At least 7 years of hands-on experience in cloud infrastructure, systems engineering, or site reliability engineering, including at least 3 years operating production AWS environments.
• Proficiency in Terraform for production infrastructure, including modular design, state management, and multi-environment promotion.
• Strong AWS networking experience, including VPC design, routing, Transit Gateway or peering, DNS, load balancing, and private connectivity.
• Hands-on experience operating core AWS compute, storage, and database services in production.
• Experience building monitoring, logging, and alerting, and responding to production incidents as part of an on-call rotation.
• Linux system administration experience, including patch management and configuration management at scale.
• Scripting proficiency in Python or Bash for operational automation.
• Experience planning and testing backup, restore, and disaster recovery.
• Experience with Git-based workflows, code review, and CI/CD for infrastructure changes.
• Clear written communication, including runbooks, architecture documentation, and incident reviews.
• Ability to work effectively remotely in cross-functional teams.
• Ability to meet deadlines and produce quality work.
• Proficiency in Microsoft Suite software, including Outlook, Word, Excel, SharePoint, and PowerPoint.
• Ability to obtain and maintain a Secret clearance.

Nice To Haves

• Experience operating AWS GovCloud or other regulated environments supporting FedRAMP High or DoD IL4/IL5 workloads.
• Experience building multi-account AWS organizations with AWS Control Tower, Account Factory for Terraform, or similar landing zone tooling.
• Experience maintaining STIG- or CIS-hardened images and meeting vulnerability remediation timelines in a compliance-driven environment.
• AWS certifications such as SysOps Administrator, Solutions Architect, or Advanced Networking.
• FinOps experience with cost allocation, showback or chargeback, and Savings Plans or reserved capacity management.
• Familiarity with Amazon EKS operations and the infrastructure Kubernetes depends on.
• Experience supporting AI/ML infrastructure, such as GPU instances, Amazon Bedrock quotas and provisioned throughput, or high-throughput data storage.
• Experience with observability tools such as CloudWatch, Grafana, Prometheus, OpenSearch, or Datadog.
• An active Secret clearance.

Responsibilities

• Build and maintain a multi-account AWS GovCloud organization, including landing zone, account vending, and baseline configuration using Terraform, with consistent tagging, naming, and environment separation.
• Design and operate VPCs, subnets, Transit Gateway, Route 53, load balancing, private VPC endpoints, and restricted-egress connectivity; troubleshoot connectivity and DNS across accounts and environments.
• Provision and operate EC2, Auto Scaling, Lambda, S3, and RDS/Aurora PostgreSQL; manage Amazon Bedrock quotas and capacity; provide the network and compute foundation for the DevSecOps team's EKS clusters.
• Implement monitoring, logging, alerting, and dashboards against defined service levels; participate in the on-call rotation; lead infrastructure incident response and write blameless post-incident reviews.
• Maintain hardened, STIG-compliant machine images and automate patching and configuration management with AWS Systems Manager or equivalent tooling to meet vulnerability remediation timelines.
• Design, automate, and regularly test backup, restore, and disaster recovery procedures against defined RPO/RTO targets, including cross-region recovery within GovCloud.
• Track and optimize cloud spend and capacity through budgets, rightsizing, commitment planning, and cost allocation reporting.
• Run infrastructure change management, maintain runbooks and architecture documentation, automate repetitive operational work, and provide operational evidence for ATO and continuous monitoring.

Benefits

• Competitive salaries and benefits.
• SmartBenefits through the Washington Metro Area Transportation Authority, allowing employees to designate pre-tax wages for direct payment to a SmarTrip account.
• Tuition assistance may be available for continuing education expenses and certifications related to the employee's position.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior