Cloud Systems/Network Engineer

Bowhead

About The Position

CLOUD SYSTEMS/NETWORK ENGINEER (MIELS): Bowhead is seeking a Cloud Systems/Network Engineer to support a customer in Stafford, VA. This contract will support the customer by: Cloud Service IAC Development and IAC Deployments, Engineering Solutions, Research and Development of Capabilities, Test and Evaluation, and Operations and Sustainment.

Requirements

Associates degree, or five (5+) years of practical experience in Cloud Systems / Network Management.
DoD 8570 / 8140 compliance IAM/IAT Level 2 Required, or higher level.
Applicable software or hardware training and certifications commensurate with the technical objectives, services required, and IT environment specified.
Required Certifications/ Experience:
Security + (DoW 8570 / 8140 IAM/IAT Level 2 or Comparable)
Programming in Bash or Powershell
AWS Cloud Certifications – Solutions Architect (SAA-CO3) (Or Higher)
(OR)
Azure Cloud Certifications – Azure Administrator (AZ-104) (Or Higher)
SECURITY CLEARANCE REQUIRED: Must currently hold a security clearance at the Top Secret/SCI level with Counter Intelligence Polygraph. US Citizenship is a requirement for Top Secret clearance at this location.

Nice To Haves

Desireable Experience:
Linux System’s Certification – Any ACE Recognized (RHEL, CompTIA, Linux Foundation)
Terraform / Terragrunt experience
Packer experience
Ansible experience
Gitlab CI/CD or Github experience

Responsibilities

Cloud Infrastructure & DevOps:
Infrastructure as Code (IaC): Develop and maintain modular, reusable code using Terraform and Terragrunt to automate the provisioning of AWS and Azure environments.
Automation & Tooling: Write and debug scripts to automate cloud workflows and manage configuration data in YAML and JSON formats.
Version Control: Utilize Git for collaborative development, code reviews, and maintaining infrastructure configurations.
System Performance: Monitor systems performance levels, troubleshooting issues to ensure high-availability access to resources.
System Administration: Administer and support physical and virtual servers across the globe. Provide advanced support for technical issues escalated from lower tier administrators or end users.
Identity & Network Engineering:
Hybrid Identity Management: Configure and troubleshoot DC (Domain Controllers), within hybrid cloud/on-prem environments.
Advanced Networking: Implement VPC/VNet architectures using CIDR notation, managing DHCP/DNS configurations, and overseeing Static/Dynamic IP allocation and Lease management.
Security Integration: Apply the OSI model and CIA Triad to implement security groups, NACLs, and firewall rules across cloud boundaries.
AWS & Azure Specialized Tasks:
Cloud Security & Access: Manage IAM roles and policies to enforce Least Privilege, overseeing S3 bucket security and EC2 instance lifecycle management.
Mission-Critical Support: Familiarity with DOD/IC information systems to meet the unique operational requirements and security posture of the USMC.
Compliance: Ensure all cloud development aligns with Department of War (DoW) standards for Information Assurance (IA) and Privileged Access (PA). Implement and manage security measures to comply with DoD/IC policies and regulations. Conduct regular system audits to ensure compliance with security policies and regulations.
Other Tasking:
Collaboration: Collaboration with other teams to support system integration and new initiatives.
Documentation Drafting: Maintain detailed documentation of system configurations, procedures, and troubleshooting guides.