{"id":2497273,"url":"https://alion.io/job/viasat-cloud-specialist","title":"Cloud Specialist","company":{"id":1758272,"name":"Viasat","domain":"viasat.com","url":"https://alion.io/company/viasat-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Carlsbad, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120500,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"ElasticSearch","optional":false},{"name":"FedRAMP","optional":false},{"name":"FortiGate","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"IAM","optional":false},{"name":"MPLS","optional":false},{"name":"Nessus","optional":false},{"name":"NIST 800-53","optional":false},{"name":"OpenSearch","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-14T02:04:58Z","employer_posted_date":null,"last_verified_at":"2026-10-14T02:04:58Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Security clearance: Dept of Homeland Security\nAbout us\n\nOne team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.\n\nWhat you'll do\n\nThe Integrated Solutions Business Unit is hiring a TMF Cloud Engineer to operate the cloud infrastructure layer of our Tactical Mission Fabric (TMF) program.\n\nTMF is a multi-tenant network-as-a-service platform that delivers secure, globally interconnected managed networking to DoD mission owners. This is a hands-on cloud engineering role, not an architecture-only seat and not a generalist IT role. Working alongside the Lead Systems Engineer, you will build, deploy, and operate the AWS infrastructure that TMF tenants run on: landing zones, networking, identity, security telemetry, and tenant compute, all inside a continuous authorization boundary where every configuration maps to a FedRAMP and NIST control. We're looking for a cloud engineer who has operated production AWS in a regulated environment: someone fluent in Terraform-driven multi-account design who understands that in a FedRAMP boundary, the audit trail is as important as the uptime.\n\nThe day-to-day\n\nCloud Infrastructure Engineering (Hands-On)\n\nMulti-Account AWS Operations: Build and operate multi-account, multi-partition AWS architectures spanning GovCloud (IL4/IL5), Secret Region (IL6), and commercial partitions, with tenant isolation enforced by architecture, not by policy alone.\nLanding Zones: Maintain and extend AWS landing zones for tenant and shared-service segmentation, including account vending, guardrails, service control policies, and CloudTrail/Config baselines, under the direction of the Lead Systems Engineer.\nCloud Networking: Engineer cloud networking: Transit Gateway, Direct Connect Gateway, Global Accelerator, VPC spoke topologies, PrivateLink, and AWS Network Firewall, integrated with the MPLS backbone and SD-WAN overlay at NNI boundary points.\nIaC-First Delivery: Author and extend Terraform modules for cloud infrastructure. Every change flows through Terraform Enterprise and GitLab CI/CD with policy gates; no direct-to-production applies.\nTenant Compute: Deploy and operate tenant compute and workspace services, including AWS WorkSpaces VDI in STIG-hardened configurations and tenant account guardrails.\n\nSecurity, Identity, and Compliance in the Cloud\n\nIdentity and Access: Operate the identity stack: AWS IAM Identity Center, AD Connector, self-managed Active Directory, and PrivacyIDEA RADIUS MFA.\nSecurity Telemetry and SIEM: Engineer security telemetry into the centralized OpenSearch SIEM, integrating Security Hub, GuardDuty, and Nessus/Tenable findings to sustain continuous monitoring under the platform's C-ATO posture.\nHardening and Evidence: Apply and maintain KMS CMK encryption baselines, AWS Backup vaults, and STIG/CIS hardening across cloud workloads; produce configuration evidence that maps to NIST 800-53 Rev 5 and 800-171 controls.\nAccreditation Support: Support FedRAMP Moderate and CMMC Level 2 assessments with cloud-layer artifacts, POA&M inputs, and continuous monitoring data.\n\nTeam and Platform Contribution\n\nIntegration Partnership: Work alongside the Lead Systems Engineer and network engineering team to keep cloud, network, and security layers integrated at every boundary.\nTenant Onboarding: Execute tenant onboarding runbooks for the cloud layer: account provisioning, boundary controls, telemetry enrollment, and operational handoff to GCC/CSOC.\nRunbooks and Improvement: Contribute to the structured runbook catalog for security, platform, and recovery operations, and feed operational lessons back into Terraform modules and landing zone baselines.\n\nWhat you'll need\n\nRequired (Day-One Critical)\n\nHands-on production AWS experience: VPC, IAM, EC2, S3, CloudTrail, Config, and multi-account structures\nTerraform module authoring and GitOps discipline in a production environment\nAWS networking: Transit Gateway, Direct Connect, VPC topologies, route tables, security groups, and hybrid connectivity to carrier or MPLS backbones\nExperience operating in a regulated or compliance-bound cloud environment (FedRAMP, DoD IL4/IL5, or equivalent), where configurations map to NIST 800-53 / 800-171 controls\nFamiliarity with cloud security tooling: SIEM integration, vulnerability management, and continuous monitoring\nScripting proficiency (Python, Bash, or similar) for automation beyond Terraform\n5+ years in cloud engineering, infrastructure engineering, or DevSecOps roles, with at least 2 years hands-on in AWS\nBachelor's degree in a technical field, or equivalent operational experience\nUS Citizenship required\nActive DoD Secret clearance required\nAbility to travel up to 15%\n\nStrongly Preferred (90-Day Ramp)\n\nAWS GovCloud-specific experience, including partition constraints and IL4/IL5 boundary operations\nAWS multi-account governance at scale: Organizations, SCPs, Control Tower or custom landing zone frameworks, account vending automation\nTerraform Enterprise or Terraform Cloud workflow experience with policy-as-code gates (Sentinel, OPA, or similar)\nGitLab CI/CD pipeline development for infrastructure delivery\nIdentity stack experience: IAM Identity Center, Active Directory integration, RADIUS/MFA solutions (PrivacyIDEA or equivalent)\nOpenSearch/Elasticsearch SIEM administration, plus Security Hub, GuardDuty, and Tenable/Nessus integration\nAWS WorkSpaces or VDI deployment in hardened configurations\nKMS, AWS Backup, and encryption baseline engineering\n\nWhat will help you on the job\n\nAWS Secret Region (IL6) or Top Secret Region experience, or other classified cloud operations\nAWS certifications: Solutions Architect Professional, Security Specialty, Advanced Networking Specialty, or SysOps\nExperience integrating cloud infrastructure with SD-WAN overlays and NGFW boundary security (FortiGate, Palo Alto)\nCloud broker or multi-cloud service delivery experience\nContainer and edge compute platforms (EKS, AWS Outposts, or forward compute architectures)\nDoD 8140/8570 baseline certification (Security+, CASP+, CISSP, or equivalent)\nTS/SCI clearance currently held\nExperience supporting FedRAMP or CMMC assessments with technical artifacts\n\n Salary range\n\n$120,500.00 - $190,000.00 / annually.For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $149,500.00- $224,500.00/ annually \n\nAt Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat's comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits. \n EEO Statement\n\nViasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.","description_format":"text","description_chars":7915,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Communications","Mobile Networks"],"lifecycle":[{"event":"open","at":"2026-10-14T04:56:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 32 · green card filings: 19","filings_12m":32,"filings_prev_12m":42,"green_card_filings_12m":19,"median_offered_wage_usd":142500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":21}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":6,"reasons":["seen:1","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/viasat-cloud-specialist","json_url":"https://alion.io/job/viasat-cloud-specialist.json","meta":{"generated_at":"2026-10-15T06:30:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9780,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1758272},"rest":"https://alion.io/mcp/rest/get_company?id=1758272"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fviasat-cloud-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fviasat-cloud-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fviasat-cloud-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/viasat-cloud-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fviasat-cloud-specialist"}]}