Note: The job is a remote job and is open to candidates in USA. Pantheon Data is a private small business providing cloud infrastructure, information technology, software engineering, cybersecurity, and related services to federal and commercial clients. The Senior Cloud Engineer will lead the operational management and technical support of secure AWS GovCloud environments hosting federal workloads, including Generative AI and machine learning applications. The role is responsible for cloud operations, security and compliance, DevSecOps support, monitoring, and incident response.
Responsibilities
- Environment Management: Provision and manage multi-account AWS GovCloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data
- Cloud Operations & Monitoring: Execute day-to-day operations including automated patching (AWS Systems Manager), backup verification (AWS Backup), and continuous monitoring via Amazon CloudWatch and CloudTrail
- Security & Compliance Ops: Perform regular security updates, image hardening (AMI/Container), and vulnerability remediation based on Amazon Inspector and Security Hub findings. Ensure all endpoints meet FIPS 140-3 requirements
- CI/CD & Dev Support: Partner with DevSecOps to integrate GitHub Advanced Security (GHAS) into deployment workflows and provide deep-dive troubleshooting for developer-facing cloud environment issues (e.g., IAM policy debugging, VPC routing, and EKS connectivity)
- Incident Response: Lead root-cause analysis for performance bottlenecks and service interruptions in production and staging environments
Skills
- * Cloud Expertise: 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS GovCloud
- * AI/ML Infrastructure: Familiarity with managing LLM infrastructure and RAG pipelines
- * Infrastructure as Code: Terraform skills, including module development and remote state management in a cross-account environment
- * Networking & Security: Advanced knowledge of VPC architecture (Transit Gateways, PrivateLink, VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS
- * Operational Tooling: Proficiency with AWS Systems Manager (SSM) for fleet management, AWS Config for compliance tracking, and Grafana/CloudWatch for observability
- * Compliance Frameworks: Understanding of FedRAMP High, NIST SP 800-53, CMMC v2/3 technical controls
- * Ability to work effectively remotely in cross-functional teams
- * Ability to meet deadlines and produce quality work
- * Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint
- Secret Clearance is required for continued employment
- * Scripting: Advanced Python or bash for custom automation and Lambda-based lifecycle hooks
- * Kubernetes: Operational experience with Amazon EKS, specifically cluster upgrades and worker node group troubleshooting
- * Certification: AWS Certified Solutions Architect or AWS Certified SysOps Administrator – Associate
- * Leadership: Experience in mentoring junior engineers and contributing to architectural review boards (ARB)
Benefits
- Remote work arrangement in the United States
- SmartBenefits through the Washington Metro Area Transportation Authority, allowing employees to specify an amount of pre-tax wages to be paid directly to their SmarTrip account
- In some cases, tuition assistance may be available for continuing education expenses and certifications related to the position
Company Overview