Cloud Engineer - Serverless & Identity (Top Secret/SCI Required)

Description

The company is hiring a hands-on Cloud Engineer for an AWS cloud program that moves quickly. The focus is serverless architecture and identity and security implementation.

This is a build role that calls for deep technical skill, not a role for someone whose background is mainly architecture or design.

You must hold a Top Secret/SCI clearance to be considered.

Responsibilities

• Take full ownership of serverless cloud components from start to finish, designing and deploying solutions on Amazon OpenSearch and OpenSearch Serverless.
• Build and maintain infrastructure as code with AWS CDK in Python.
• Develop and connect workflows across API Gateway, Lambda, and DynamoDB.
• Implement identity and access patterns, including JWT handling, OAuth flows, Lambda authorizers, CRL validation, and JWKS token validation.

Requirements

• Hands-on experience implementing Amazon OpenSearch and OpenSearch Serverless.
• Experience with the AWS serverless stack: API Gateway, Lambda, and DynamoDB.
• Experience writing infrastructure as code with AWS CDK in Python.
• Experience with identity and access engineering using JWTs and OAuth.
• Experience building and integrating Lambda authorizers.
• Experience with Certificate Revocation List (CRL) and JWKS validation.
• Active Top Secret/SCI clearance.
• AWS certification such as AWS Certified Developer, AWS Certified Solutions Architect, or an equivalent.
• Preferred: experience delivering solutions in a classified or secure enclave environment.
• Preferred: familiarity with data lake patterns on AWS.
• If the role requires a federal security clearance, state your clearance level clearly on your resume.

Conditions

The role is based on a builder model with long-term projects that use current technology.

Equal opportunity: applicants are considered without regard to protected characteristics.

Benefits

• The company offers competitive compensation, benefits, and a flexible work-life balance.
• Owners are directly reachable by team members.