Principal Cloud Engineer

Sr. Principal Cloud Engineer (AWS) Location: Washington, D.C Duration: Long term contract Top Qualifications, Skills, Experience or Certifications: 1. 10+ years of experience deploying/configuring workloads within AWS Commercial Cloud using the Console, CLI, and scripting methods, 15+ years experience in technology 1. Demonstrated understanding of compute, network, and storage principals 1. Demonstrated proficiency managing large Organization with Organization Units, Policies, Configs to maintain compliance 1. AWS Solutions Architect Professional Job Role Specific Requirements: 1. Solid experience with PrismaCloud platform and familiarity with PaloAlto services 1. Support strategic cloud initiatives, such as TIC 3.0, Zero Trust Architectures, and DevSecOps by providing architectural guidance and hands on implementation approach 1. Identify and communicate opportunities for improving agency security posture within cloud environments 1. Collaborate with external development teams to validate solution architecture within agency cloud environment 1. Identify opportunities to periodically review and improve Service Control Policies, Configs, remediations 1. Monitor alerts for security upgrades and risks as well as notifications from AWS and Azure 1. Design and buildout of AWS environments using the console, CLI, and Infrastructure as Code 1. Deploy CloudFormation IAC stacks/sets across Accounts 1. Support all tiers of applications deployed in the cloud, configuring network, cloud native services, infrastructure, and privileges for development teams (AWS Accounts, IAM Users and Roles, VPCs, cloud native services) 1. Identify opportunities for optimizing cloud consumption by the agency 1. Support migration of on-premise workloads to cloud following agency governance and reference architectures 1. Recommend enterprise design improvements to comply with Federal policies and standards Preferred skills and qualifications: 1. Experience implementing, managing, and supporting security products to protect workloads in AWS 1. Good understanding of FedRAMP services and best practices for their consumption by application workloads – examples include API Gateway, Lambda functions, Cognito, AWS Code Commit, and container services 1. Experience assessing, customizing, troubleshooting, optimizing, and maintaining current and emerging technologies, platforms, and applications to help ensure greater security and efficiencies, inclusive of containers 1. Demonstrated understanding of cloud engineering methods, applications, and best practices across cloud service providers. 1. Demonstrated proficiency with implementing and managing AWS services via AWS Console or CLI of AWS accounts, IAM users, IAM roles, VPCs, load balancers. 1. Experience managing AWS Public and GovCloud across regions. 1. Experience with deploying stack sets and using AWS Control Tower. 1. Good knowledge of GovCloud organizations provision accounts using Compliance Framework. 1. Proficiency in automating processes with Terraform, AWS CloudFormation, Packer, PowerShell, or Python, including use of remote APIs 1. Experience with cloud orchestration tools and continuous delivery processes to deploy and manage cloud infrastructure for customers to consume