Senior AWS Cloud Engineer

Overview

Steampunk is seeking a Senior AWS Cloud Engineer who is excited about supporting the design, implementation, operations, and continuous improvement of enterprise cloud environments on Amazon Web Services (AWS). The ideal future Punk will bring deep technical engineering expertise along with experience in operational leadership, DevSecOps practices, cloud security, and infrastructure automation to support mission-critical workloads in enterprise and regulated environments.

The Senior Cloud Engineer will have hands-on ownership of AWS services and pipelines within landing zones, with day-to-day responsibility for building, operating, troubleshooting, and continuously improving the environment.

Contributions

• Identify opportunities for operational automation, process improvement, and reduction of manual support overhead
• Advise customers and stakeholders on AWS-native and AI-enabled services to improve scalability, security, operational efficiency, and performance
• Contribute to technical standards, governance processes, operational procedures, and continuous improvement initiatives
• Provide technical guidance to Cloud Engineers and junior team members while reinforcing engineering and security best practices
• Present technical status updates, conduct knowledge transfers, and support cross-training initiatives within the team
• Engineer and deploy modular cloud infrastructure and platform services using infrastructure as code, including Terraform and AWS CloudFormation, and automation frameworks
• Support enterprise cloud operations, including monitoring with Amazon CloudWatch, patching, backup and recovery, incident response, vulnerability remediation, and performance optimization
• Automate provisioning, deployment, configuration management, and release processes using AWS CodeCommit, AWS CodePipeline, AWS Lambda, and industry-standard DevSecOps and CI/CD tooling
• Implement and maintain cloud security controls aligned with NIST 800-53, FedRAMP, CIS Benchmarks, zero trust principles, and enterprise security policies, leveraging AWS Security Hub
• Operate and support multi-account structures, Service Control Policies (SCPs), Resource Control Policies (RCPs), and AWS Landing Zone guardrails established by leadership
• Support hybrid connectivity operations, including AWS Direct Connect and Transit Gateway
• Support DNS operations, including Amazon Route 53 and hybrid DNS management
• Administer VPC-level networking controls, including Network Access Control Lists (NACLs) and Security Groups
• Identify, troubleshoot, and resolve complex cloud infrastructure, operational, deployment, and security issues while performing root cause analysis and implementing corrective actions
• Collaborate with DevSecOps engineers, networking teams, and cybersecurity stakeholders to ensure solutions align with enterprise standards and operational requirements

Qualifications

Required:

• Ability to obtain and maintain a U.S. government Public Trust Security Clearance
• Bachelor's Degree and 10 years of total professional experience
• 8 years of relevant experience in cloud engineering, infrastructure engineering, DevSecOps, or related technical disciplines
• 5 years of hands-on experience developing, implementing, or supporting AWS
• Experience working in Agile development and engineering environments
• 5 years of experience implementing proof of concept (POC) or minimum viable product (MVP) solutions and participating in sprint demonstrations
• Experience across core AWS services, including networking, compute, storage, identity and access management (IAM), security, and monitoring
• Advanced understanding of cloud operations and maintenance (O&M) practices in enterprise or regulated environments
• Experience implementing infrastructure as code, automation, and orchestration using Terraform, AWS CloudFormation, and/or Terragrunt
• Experience integrating deployments with industry-standard DevSecOps tooling and CI/CD orchestration pipelines, including AWS CodeCommit and AWS CodePipeline
• Experience with scripting and automation using Python, Bash, PowerShell, Groovy, or Ruby
• Analytical mindset with strong continuous improvement and operational optimization capabilities
• Strong troubleshooting and root cause analysis capabilities across infrastructure, application, and operational domains
• Strong written and verbal communication skills with the ability to communicate technical concepts to technical and non-technical stakeholders
• Professional maturity and ability to effectively manage operational incidents, escalations, ambiguity, and shifting priorities in fast-paced environments
• Hands-on experience with AWS technologies and related tools, including:
  • AWS Control Tower and multi-account management
  • Service Control Policies (SCPs) and Resource Control Policies (RCPs)
  • AWS Landing Zones
  • AWS Direct Connect, Transit Gateway, Amazon Route 53, and hybrid DNS
  • AWS Lambda
  • Terraform and Terragrunt
  • GitHub
  • AWS CloudFormation
  • AWS Commercial and AWS GovCloud environments
  • AWS Identity Center
  • Python scripting
  • Amazon S3
  • Networking, including IPv6
  • AWS CodeCommit
  • AWS CodePipeline
  • AWS Security Hub
  • Amazon CloudWatch for monitoring and logging
• Experience operating within environments requiring NIST 800-53, FedRAMP, and FISMA standards
• Must possess one of the following certifications:
  • AWS Certified DevOps Engineer – Professional OR
  • AWS Certified SysOps Administrator – Associate or current equivalent AWS CloudOps certification

Preferred:

• Experience assisting in architecting, designing, implementing, and maintaining secure, scalable, and resilient AWS solutions
• Familiarity with cloud-native security tooling such as AWS Security Hub
• Experience supporting production environments with high availability and mission-critical workloads
• Familiarity with secure software delivery pipelines and modern DevSecOps best practices
• Experience implementing and supporting containerized workloads using Docker and Kubernetes
• Understanding of cloud security concepts, including zero trust architecture, network segmentation, encryption, vulnerability management, and secure configuration management
• Experience with Git-based source control management platforms such as GitHub, GitLab, or Bitbucket
• AWS Certified Solutions Architect – Associate certification

About steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $130,000 to $180,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.