Cloud Engineer Senior

The Cloud Engineer Senior designs, engineers, and integrates secure, scalable cloud infrastructures across public, private, and hybrid environments to support mission‑critical applications in an enterprise or federal IT setting. This role leads Infrastructure as Code implementation, cloud governance guardrails, and automation patterns to standardize provisioning, configuration, and change management across multiple cloud platforms. The engineer owns cloud networking, security controls, observability, and cost optimization while ensuring high availability, disaster recovery readiness, and continuous improvement of the cloud platform.

Key Responsibilities

• Architect and implement multi‑cloud and hybrid cloud solutions (e.g., AWS, Azure, GCP) with a focus on security, scalability, and high availability for mission‑critical workloads.
• Design and manage cloud networking constructs such as VPCs, subnets, transit gateways, VPNs, and connectivity to on‑premises networks, including routing, DNS, and load balancing.
• Implement Infrastructure as Code using tools such as Terraform, CloudFormation, or ARM/Bicep to automate provisioning, configuration, and lifecycle management of cloud resources.
• Establish and enforce cloud governance policies, guardrails, and landing zone patterns encompassing identity and access management, tagging standards, quota management, and controls for regulated environments.
• Configure and operate cloud security services and controls such as security groups, network ACLs, key management, secrets management, web application firewalls, and vulnerability monitoring.
• Deploy and tune cloud monitoring, logging, and observability solutions (e.g., CloudWatch, Azure Monitor, Stackdriver, ELK) to provide operational visibility, alerting, and performance insights across distributed systems.
• Optimize cloud resource utilization and costs through rightsizing, reserved and savings plans, storage lifecycle policies, and auto‑scaling strategies that support variable workloads.
• Design and test disaster recovery and business continuity architectures for cloud workloads, including multi‑region deployments, backup and restore processes, and well‑defined recovery objectives.
• Collaborate with application, security, and operations teams to provide cloud expertise, conduct architecture reviews, and lead root cause analysis and remediation of complex cloud issues.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems Management, Information Technology, or a related field, or equivalent relevant experience.
• 10–12 years of IT experience, including at least 5–8 years of progressive cloud engineering, infrastructure, or DevOps experience with increasing responsibility in enterprise or government environments.
• Minimum 5 years of hands‑on experience with one or more major cloud vendor platforms (AWS, Azure, GCP), including production design and operations of highly available, scalable architectures.
• Professional‑level cloud certification in AWS, Microsoft Azure, OCI, or Google Cloud (e.g., AWS Solutions Architect – Professional, Azure Solutions Architect Expert, or Google Professional Cloud Architect).
• Demonstrated expertise with Infrastructure as Code and automation (Terraform, CloudFormation, ARM/Bicep, CI/CD pipelines) for cloud infrastructure provisioning and change management.
• Strong experience implementing and managing cloud security controls, identity and access management, and shared responsibility models in regulated environments.
• Ability to obtain and maintain a SECRET‑level background investigation and meet U.S. citizenship requirements for a federal IT environment.

Preferred Qualifications

• Experience designing and supporting systems in highly regulated or compliance‑driven environments (e.g., FedRAMP, CJIS, HIPAA, PCI) and aligning architectures to relevant frameworks.
• Prior responsibility as a lead or subject matter expert for multi‑cloud or hybrid cloud platforms in enterprise or government environments.
• Experience implementing CI/CD pipelines that integrate IaC, security scanning, and automated testing for cloud infrastructure changes.
• Master’s degree in a technical field or equivalent experience demonstrating advanced cloud architecture and leadership capabilities.

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.