What are the responsibilities and job description for the USAF - Cloud Engineer position at cFocus Software Incorporated?
cFocus Software seeks a Cloud Engineer to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience implementing and operating enterprise cloud or hybrid infrastructure and integrating cloud services with on-premises systems.
- Ability to provision virtual or cloud servers and manage infrastructure configurations, connectivity, monitoring, and operational troubleshooting.
- Experience with Infrastructure as Code, Configuration as Code, scripting, and CI/CD workflows.
- Working knowledge of cloud security controls, access management, logging, vulnerability remediation, and secure configuration baselines.
- Ability to support STIG implementation, maintain authorization boundary controls, and provide technical evidence for RMF and ATO activities.
- Ability to document designs and as-built environments, assess resource utilization, and coordinate controlled deployments with technical teams.
- Implement and maintain cloud and hybrid infrastructure in accordance with Government-approved enterprise architecture, cloud strategy, security designs, and DevSecOps processes.
- Provision cloud and virtual servers under approved designs and baselines. Integrate services with on-premises networks, applications, and infrastructure.
- Develop and maintain Infrastructure as Code and Configuration as Code to deploy consistent, repeatable infrastructure and application configurations.
- Create and maintain Continuous Integration/Continuous Deployment (CI/CD) pipelines for infrastructure and applications. Automate Government-specified security controls and deployment guardrails.
- Implement approved technical controls for multiple impact levels and classified and unclassified environments. Maintain separation and controls associated with each authorization boundary.
- Configure continuous monitoring, observability, logging, and alerts across cloud resources and ATO boundaries. Investigate performance degradation and supply operational reports and monitoring data.
- Support deployment and integration of Cybersecurity Service Provider capabilities and Government-approved cross-domain solutions within the assigned infrastructure scope.
- Automate Security Technical Implementation Guides (STIGs), system configurations, and network diagrams. Maintain pipeline artifacts and configuration records.
- Integrate and test solutions for Government review and authorized deployment. Track changes under the approved Configuration Management Plan.
- Support automated vulnerability scans, analyze findings, recommend remediation, and apply approved patches and secure configuration changes with cybersecurity teams.
- Provide technical evidence, documentation, and continuous monitoring data supporting Risk Management Framework assessments and Authorization to Operate or continuous ATO activities.
- Implement approved data tagging and resource attribution, provide inventory and utilization data, and support FinOps cost allocation and capacity planning.
- Prepare design and as-built documentation; recommend infrastructure improvements and cloud or edge computing solutions supporting DC3 mission requirements.
- Support planning and migration of high-risk workloads to accredited multi-cloud environments while Government facility security improvements are performed, as directed.
- Assist incident response and service restoration by supplying logs and system data and implementing directed corrective actions. Coordinate with NOC, SOC, and other operations teams.