Cloud Engineer

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Supporting a premier law enforcement agency, the Cloud Engineer owns the MREF cloud platform architecture, infrastructure build, monitoring solution, and DevSecOps infrastructure. Designs for near-zero downtime, maximizes use of the clients Cloud Services and clients Enterprise Developer Services, and drives cloud cost reduction..

• Maximize virtualization and containerization, emphasizing PaaS over IaaS, and maximizing use of FCS and FEDS managed services.
• Design, document, test, and implement the MREF Architecture Design Report optimizing for performance, availability, security, scalability, disaster recovery, and real-time or near real-time data integration across classified and unclassified networks.
• Design to a 4-hour Recovery Time Objective and a 4-hour Recovery Point Objective, propose data replication methods to achieve them, and describe how both will be demonstrated; pursue near-zero downtime for patch and release deployment.
• Propose and implement the MREF Implementation Plan and the monitoring solution recording SLA compliance in near real time at approximately a 5-minute delay, including the automated dashboard retaining at least 15 months of uptime history; review metrics monthly and deliver a performance optimization plan.
• Design, document, and implement the DevSecOps solution covering build and CI/CD tooling, with documentation captured in Confluence or an ATS-approved equivalent; periodically reassess the approach against emerging client platform offerings and present findings to government leads.
• Maintain and update the IaC solution to produce a rapid, flexible, automated build of a consistent, secure, and compliant environment, and identify all dependencies, licenses, and subscription costs.
• Deliver the detailed as-built system architecture, including network diagrams, NACLs and security groups, IAM policies and roles, OS configurations, logical and data flow diagrams covering low/high transfers, authentication flows, CI/CD pipelines, Splunk logging configuration, and health monitoring.
• Provide FCS with the specification of required services, architectural specification, and supporting documentation needed for account and resource provisioning.
• Propose the tagging and labeling strategy and track and project cloud costs; identify, propose, and implement methods to reduce cloud infrastructure cost.
• Incorporate cloud-native technologies and tools aimed at improving agility, lowering cost, and maximizing automation of system administration tasks.
• Perform regular and urgent STIG and vulnerability assessments across FIT and MREF, implement remediation per approved POA&M timelines, and provide status and results to the ISSO.
• Support the ISSO and ISSM in obtaining and maintaining the FIT and MREF ATO, including preparation of security documentation updates and participation in continuous monitoring activities.
• Ensure the application and infrastructure adhere to and satisfy all existing and future client security requirements, developed and maintained in accordance with policy guides, department policy, and applicable Executive Orders.
• Abide by licensing agreements and maintain the license tracker report accounting for government-procured licenses, license types, and copies in use across all environments.
• Maintain and support the cloud infrastructure in sustainment.

What You Will Need:

• EIGHT (8) years of infrastructure or platform engineering experience, including FOUR (4) years with Red Hat OpenShift or Kubernetes and THREE (3) years supporting Federal systems in an accredited environment.
• Bachelor's degree (FOUR (4) additional years of relevant experience may be substituted for formal education).
• US Citizenship is required.
• An ACTIVE and MAINTAINED TOP SECRET Federal or DoD security clearance

What Would Be Nice To Have:

• Red Hat OpenShift architecture, operators, storage classes, and network policy; containerization of enterprise application components.
• Cloud-native PaaS architecture and managed service selection; IaC automation frameworks.
• DevSecOps pipeline design, CI/CD architecture, and artifact management.
• Monitoring and observability design, including SLA instrumentation, Splunk, and uptime dashboarding.
• STIG hardening, vulnerability remediation, and security authorization support.
• Cloud cost management, tagging strategy, and infrastructure cost optimization.
• Red Hat Certified Architect or Certified Specialist in OpenShift Administration; CISSP.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Parental Leave

• 401(k) Retirement Plan

• Group Term Life and Travel Assistance

• Voluntary Life and AD&D Insurance

• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts

• Transit and Parking Commuter Benefits

• Short-Term & Long-Term Disability

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Care.com annual membership

• Employee Assistance Program

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)

• Position may be eligible for a discretionary variable incentive bonus

About Guidehouse

Guidehouse is an Equal Opportunity Employer-Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at [email protected]. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or [email protected]. Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process.

If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact [email protected]. Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.