Cloud Engineer- Senior

Description The Cloud Engineer Senior supports the SEC ISS contract by designing, implementing, andoperatingsecure, scalable cloud infrastructure for enterprise applications and services. This role is central to OIT's hybrid infrastructure strategy, ensuring reliable integration of cloud and on-premises environments whilemaintaininghigh availability and performance. The engineer drives automation-first operations using infrastructure-as-code and CI/CD practices to improve consistency, speed, and operational resilience. The position enforces zero-trust and compliance requirements, supports migration and modernization initiatives, and provides technical leadership across cloud engineering activities. Primary Responsibilities

• Cloud Infrastructure Engineering and Operations
• Design, implement, and manage cloud infrastructure solutions in Microsoft Azure and AWS, with Azure as the primary platform and AWS support focused on integration with project-team-managed workloads and potential future expansion.
• Build andmaintaincloud networking, storage, compute, app services, virtualization, and containerized environments.
• Ensure scalability, resiliency, and high availability through proactive performance tuning, capacity planning, and operational optimization.
• Partner with operations teams tomonitorproduction services, resolve incidents, and improve reliability across cloud platforms.
• May require participation in on-call or surge support activities depending on operational

Security, Identity, and Compliance

• Implement andmaintaincloud security configurations aligned with SEC security policies and zero-trust principles.
• Engineer and support identity and access controls using Microsoft Entra, RBAC, conditional access, and least-privilege models.
• Enforce governance controls and policy compliance to support organizational and regulatory requirements, audit readiness, and risk reduction.
• Drive patching, vulnerability remediation, and secure configuration baselines across cloud-hosted infrastructure.

Automation,IaC, and CI/CD Enablement

• Develop andmaintainautomation using PowerShell, Bicep, ARM templates, andTerraformto provision and manage infrastructure.
• Integrate infrastructure workflows with CI/CD pipelines to standardize deployments, reduce manual effort, and improve release quality.
• Implement reusableIaCmodules, scripting standards, and version-controlled operational artifacts.
• Advance automated operating models to increase consistency, security, and scalability.

Migration, Modernization, and Technical Leadership

• Lead migration of workloads from legacy/on-premises platforms to modern cloud and hybrid architectures with minimal disruption.
• Optimizecloud resourceutilization, cost, and service performance based on operational and mission priorities.
• Provide technical guidance and mentorship to junior engineers and cross-functional infrastructure teams.
• Create andmaintainarchitecture documentation, SOPs, and implementation guidance to support sustainable operations.

Required Qualifications

• This position is restricted to U.S. citizens only. Applicants must not hold dual citizenship with any other country to be eligible for work under this contract.
• The ability to obtain andmaintainSEC Public Trust (or higher ifrequired).
• Bachelor's degree in a relevant field and 8+ years of experience in IT infrastructure roles, including 5+ years focused on cloud engineering. Additional years' of experience may be considered in lieu of degree.
• Demonstratedexperience designing and managing secure,highly availablecloud environments for enterprise services.
• Proven experience leading cloud migration and modernization efforts in regulated environments.

Technical Skills

• Microsoft Azure and AWS cloud services (Azure primary; AWS integration support experience).
• Cloud networking, storage, app services, virtualization, and containerization.
• PowerShell, Bicep, ARM templates, and Terraform.
• CI/CD pipeline implementation and automation practices.
• Cloud governance, policy enforcement, and operational compliance.
• Microsoft Entra identity services, RBAC, and access management.
• Zero-trust security principles and secure cloud configuration practices.

Preferred Qualifications

• Contract-context enhancement: Experience supporting federal agency IT environments with FISMA/FedRAMP-driven security and compliance requirements.
• Contract-context enhancement: Hands-on experience with Kubernetes/OpenShift and cloud-native container platform operations.
• Contract-context enhancement: Experienc