Trace3 is hiring a Cloud Engineer III - (W2PE) - Remote

Active (or active within 24months) Secret Security Clearance required, can hold TS JOB SUMMARY: The Cloud Engineer III supports the design, planning, and implementation of IL5-aligned cloud environments within AWS GovCloud (US). This role focuses on executing complex cloud engineering tasks, supporting secure architecture development, and ensuring alignment with DoD cybersecurity requirements and operational objectives. There may be some travel required with this position. SUMMARY OF ESSENTIAL JOB FUNCTIONS: - Support the design and implementation of secure cloud architectures aligned to NIST SP 800-53 Revision 5 and DoD SRG requirements - Develop and maintain infrastructure-as-code (IaC) solutions to enable repeatable and portable cloud deployments - Implement and configure core cloud services including networking, identity and access management, logging, monitoring, and encryption - Support development of transferable enclave architectures for constrained or restricted hosting environments - Evaluate existing system architectures and assist with modernization efforts to improve scalability, security, and efficiency - Deploy and support containerized workloads and cloud-native services, including serverless and managed service patterns - Implement required security controls to support RMF and ATO processes, including evidence collection and validation - Support data migration activities including preparation, execution, and validation - Collaborate with architects, security engineers, and stakeholders to ensure alignment across design, implementation, and compliance - Troubleshoot and resolve complex issues across cloud infrastructure, networking, and application environments REQUIRED SKILLS AND EXPERIENCE: - Hands-on experience deploying and operating workloads in AWS GovCloud (US) or commercial AWS environments - Strong experience with AWS services including VPC, EC2, IAM, KMS, CloudWatch, and related networking and security services - Experience developing infrastructure-as-code using tools such as Terraform or CloudFormation - Experience working with container technologies such as Docker and container orchestration or serverless container platforms - Understanding of DoD or federal cybersecurity frameworks including NIST 800-53 and RMF - Ability to implement secure configurations aligned to STIGs and vulnerability management practices PREFERRED SKILLS AND EXPERIENCE: - Experience supporting IL4/IL5 environments or DoD SRG-aligned cloud implementations - Familiarity with ATO processes, eMASS, and security control evidence development - Experience with managed cloud services such as database-as-a-service and serverless architectures - Experience operating in constrained or restricted cloud environments with service limitations - AWS certifications such as Solutions Architect or Security Specialty EDUCATION: Bachelors with 7+ or Master with 5+ Years of Experience LENGTH: 4 Months LOCATION: Hybrid Remote/On site Colorado Springs CLEARANCE REQUIRMENT: Secret DOD 8570 REQUIREMENT: None SALARY RANGE: $100 to $120 per hour PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions. While performing the duties of this job, the employee is regularly required to: - Remain in a stationary position for extended periods of time. - Operate a computer, keyboard, and other office equipment using hands and fingers. - Communicate effectively in person, over the phone, and through electronic means. - Occasionally move about the office to access files, office equipment, and meeting spaces. - Lift and/or move up to 15 pounds as needed. - Maintain specific vision abilities, including close vision and the ability to adjust focus. WORK ENVIRONMENT: This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.