NCIS Cloud Engineer | Active Secret clearance

Description

The Naval Criminal Investigative Service (NCIS) is a Department of the Navy component with about 2,000 personnel, 700 of them at headquarters and the rest at offices worldwide. It holds primary responsibility for criminal investigation, law enforcement, counterterrorism, counterintelligence and cyber matters within the DON, and exclusive investigative jurisdiction over non-combat cases involving actual, potential or suspected criminal activity, terrorism, sabotage, espionage and subversion.

The role sits in the IT Technology Operations division of the NCIS IT organization in Quantico, VA. You will work alongside the Cloud Architect to build, deploy, secure, automate and run the day-to-day cloud infrastructure, leading the engineering work and technical direction for cloud solutions so they serve both current and long-term goals. The work centres on a DevSecOps environment and CI/CD pipeline.

Responsibilities

• Build, deploy, secure, automate and manage day-to-day cloud infrastructure.
• Build a CI/CD pipeline from the ground up using industry best practices and DevSecOps principles, with tools such as Jenkins and Terraform.
• Provision infrastructure as code, using languages such as Python, and carry out DevOps strategies that fit application requirements.
• Build and deploy Docker containers running various software.
• Set up and configure identity and access management (IAM), storage accounts, storage access and security.
• Configure resource and activity monitoring, with alarms and notifications.
• Use DevOps tools such as GitHub and Jenkins to support continuous integration and continuous delivery.
• Design and develop infrastructure as code with Terraform, CloudFormation or Ansible across multi-cloud deployments.
• Configure cloud networking, including virtual networks, VNet peering, firewalls, web application firewalls, application gateways, load balancers, VPNs and gateways, network security groups and cloud DNS and ADDS sync.
• Find and fix infrastructure vulnerabilities and application deployment issues.
• Review existing systems regularly and recommend improvements and cost savings.
• Build and maintain cloud solutions that follow customer best practices and guidance.
• Work in an Agile Scrum development team.
• Interact with clients, provide cloud support and recommend solutions based on their needs.
• Handle recovery, support testing and operations and maintenance activities.
• Make sure performance, security and other requirements are met.
• Support security staff in obtaining and maintaining the ATO.

Requirements

• Active Secret clearance. You must be able to obtain a TS/SCI clearance after hire.
• US citizenship.
• 10+ years of cloud engineering or architecture experience.
• Bachelor's degree in a technical discipline, or an additional 4 years of experience in place of the degree.
• AWS Certified Solutions Architect - Professional.
• Certified Kubernetes Administrator (CKA).
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
• Experience with DevOps platforms, including Azure, AWS, Docker, Ansible and Kubernetes.
• Experience with AWS Identity and Access Management (IAM), cloud engineering and DevOps.
• Experience with Jenkins, Artifactory, Docker, Kubernetes, GOTS Nitro and Platforma.
• Deep knowledge of DevSecOps, CI/CD pipelines and modern development practices.
• Familiarity with identity and access management, PKI, encryption standards, logging, monitoring and audit requirements.
• Experience with major cloud platforms such as AWS and Microsoft Azure, and with government cloud services.
• Working knowledge of federal security and compliance frameworks: FISMA, FedRAMP, RMF and ATO processes.
• Solid understanding of cloud service models (IaaS, PaaS, SaaS) and hybrid environments.
• Knowledge of product evaluation methods and cloud market trends.
• Ability to write systems design documents, architecture artifacts and technical documentation to standard.
• Experience with cloud computing, containerization and Kubernetes.
• Documented experience with DevOps platforms.
• Experience with DevOps tools such as GitHub and Jenkins for continuous integration and delivery.
• Experience building infrastructure as code with Terraform, CloudFormation or Ansible.
• Experience with cloud networking, VPNs, firewalls, load balancing and DNS.

Conditions

Location: Quantico, VA. Hybrid work: 3 days onsite in Quantico and 2 days remote.

Full-time, 40 scheduled hours per week. No travel required.

Salary is likely to fall between $164,382 and $195,500, based on experience, geographic location and possibly contractual requirements, and may fall outside that range. It is not a guarantee of pay.

You must be on camera during virtual interviews and complete an identity verification process that uses biometrics and AI. Biometric data is used for verification and security only.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre- and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible, and paid time off including vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• An AI-powered career tool that suggests career steps and learning, and an internal mobility team.
• Competitive pay.