USAF - Cloud Engineer

cFocus Software seeks a Cloud Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience implementing and operating enterprise cloud or hybrid infrastructure and integrating cloud services with on-premises systems.
• Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
• Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
• Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
• Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
• Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.

Duties:

• Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
• Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
• Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
• Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
• Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
• Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
• Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
• Automate Security Technical Implementation Guides (STIGs), system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
• Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
• Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
• Provide technical evidence, documentation, and continuous monitoring data supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
• Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
• Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
• Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
• Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.