Hybrid Cloud Engineer – Active Secret Clearance

at TOMORROW HIRE

• Job title: Cloud Engineer – Active Secret Clearance
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $100,000 - $145,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Ansible, AWS, Azure, Cloud, Cyber Security, DNS, Docker, Kafka, Kubernetes, Linux, Postgres, Python, SQL, TCP/IP, Terraform, Vault
• Location requirements: Hybrid, Washington, United States

About the role

• Cloud Engineer designing, building, securing, and sustaining cloud platforms for U.S. Coast Guard. Collaborating with cybersecurity and application teams to deliver optimized cloud services.

Responsibilities

• Design secure, scalable landing zones, VNET/VPC architectures, and networking aligned to Zero Trust, and government policies.
• Implement infrastructure as code (Terraform, CloudFormation, Bicep) and configuration management (Ansible, SSM, Desired State Configuration).
• Create reusable modules/pipelines (CI/CD) in GitHub/GitLab/Azure DevOps for repeatable provisioning and blue/green deployments.
• Engineer controls to meet FedRAMP, FISMA, and NIST SP 800‑53 requirements.
• Stand up and manage container and serverless platforms (EKS/AKS, ECS, Lambda, Azure Functions) and PaaS services (databases).
• Implement observability (logging, metrics, tracing) using CloudWatch, Azure Monitor, OpenTelemetry, or Synthetics.
• Contribute to cloud governance standards, landing zone patterns, and best practices catalogs.
• Partner with developers, cybersecurity, and mission owners to migrate/modernize systems (rehost/refactor/replatform).
• Provide support, root-cause analysis, and knowledge transfer to operations teams.
• Provide Tier I and Tier II Helpdesk Support to end users via phone, email, and ticketing systems.
• Support user account management (Active Directory, permissions, and group policies)

Requirements

• Active Secret clearance (required at time of application).
• Bachelor’s degree in Business, IT, or a related field.
• 3-7+ years of hands-on cloud engineering or SRE experience in AWS and/or Azure (federal or enterprise).
• Proficiency with Infrastructure as Code (Terraform preferred) and CI/CD pipelines.
• Strong foundation in networking (TCP/IP, DNS, TLS, routing, VPNs), Linux/Windows, containers (Docker, Kubernetes), and git.
• Experience implementing security controls aligned to NIST 800‑53 and FedRAMP.
• Familiarity with RMF/ATO processes.
• Scripting skills in Python, PowerShell, or Bash.
• Ability to create clear documentation, diagrams, and runbooks; strong stakeholder communication skills.
• Data services expertise (RDS/SQL MI, Postgres, KMS/Key Vault, Secrets Manager) and event-driven patterns (Kafka/Event Hub).
• Must be able to reliably commute to Washington, D.C. 20032.

Benefits

• Health, Vision, and Dental Insurance
• PTO