Sr. Cloud Engineer

Pantheon Data • Charlotte, NC

23h • Remote

About The Position

Pantheon Data is seeking a Sr. Cloud Engineer to lead the operational management and technical support of AWS GovCloud (US) environments. This role is critical in hosting secure federal workloads, including Generative AI (Bedrock) and ML (SageMaker) applications. You will ensure 99.9% availability, maintain compliance with NIST 800-53 Rev 5 and CMMC 2.0 Level 2, and serve as the primary technical escalation point for developers and DevSecOps engineers.

Requirements

• 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS GovCloud.
• Familiarity with managing LLM infrastructure and RAG pipelines.
• Terraform skills, including module development and remote state management in a cross-account environment.
• Advanced knowledge of VPC architecture (Transit Gateways, PrivateLink, VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS.
• Proficiency with AWS Systems Manager (SSM) for fleet management, AWS Config for compliance tracking, and Grafana/CloudWatch for observability.
• Understanding of FedRAMP High, NIST SP 800-53, CMMC v2/3 technical controls.
• Ability to work effectively remotely in cross-functional teams.
• Ability to meet deadlines and produce quality work.
• Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint.
• U.S. Citizenship: Required for GovCloud access.
• Ability to obtain or maintain a DoD Secret (or higher) clearance.
• Adherence to Pantheon Data internal engineering standards and federal data handling protocols.

Nice To Haves

• Advanced Python or bash for custom automation and Lambda-based lifecycle hooks.
• Operational experience with Amazon EKS, specifically cluster upgrades and worker node group troubleshooting.
• AWS Certified Solutions Architect or AWS Certified SysOps Administrator – Associate.
• Experience in mentoring junior engineers and contributing to architectural review boards (ARB).

Responsibilities

• Provision and manage multi-account AWS GovCloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data.
• Execute day-to-day operations including automated patching (AWS Systems Manager), backup verification (AWS Backup), and continuous monitoring via Amazon CloudWatch and CloudTrail.
• Perform regular security updates, image hardening (AMI/Container), and vulnerability remediation based on Amazon Inspector and Security Hub findings. Ensure all endpoints meet FIPS 140-3 requirements.
• Partner with DevSecOps to integrate GitHub Advanced Security (GHAS) into deployment workflows and provide deep-dive troubleshooting for developer-facing cloud environment issues (e.g., IAM policy debugging, VPC routing, and EKS connectivity).
• Lead root-cause analysis for performance bottlenecks and service interruptions in production and staging environments.

Benefits

• Competitive salaries and benefits
• SmartBenefits through the Washington Metro Area Transportation Authority
• Tuition assistance may be available for continuing education expenses and certifications related to their position.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed
• Number of Employees: 11-50 employees