Cloud Engineer - Level III

• Design, implement, and sustain enterprise network architectures across on-premises, hybrid, AWS, and Azure cloud environments 
• Lead network engineering efforts through the full system lifecycle, including planning, design, implementation, testing, deployment, accreditation, and sustainment 
• Serve as the senior technical authority (SME) for routing, switching, network security, secure communications, firewall architecture, and cloud networking design 
• Engineer and maintain AWS and Azure cloud networking components, including VPCs, VNets, subnets, route tables, transit gateways, virtual WAN, ExpressRoute, Direct Connect, VPN gateways, peering, private endpoints, security groups, NSGs, load balancers, DNS services, NAT gateways, and hybrid interconnections 
• Develop and enforce network standards, security baselines, firewall policies, segmentation strategies, access control requirements, and cloud network governance 
• Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and Army 8140 requirements for privileged administrative access 
• Analyze, document, and optimize end-to-end traffic flows across enterprise, tactical, and cloud environments to ensure secure routing, performance, resiliency, and mission effectiveness 
• Provide technical oversight for DevSecOps and Infrastructure as Code (IaC) implementations supporting network automation and cloud network provisioning
• Lead advanced troubleshooting and root cause analysis for complex network, firewall, routing, latency, packet loss, and connectivity issues across multi-domain environments
• Support Authority to Operate (ATO) activities, including documentation, testing, remediation, and security validation 

• Dynamic: contributes energy and enthusiasm to our daily tasks, to the team’s interactions, and to the Company’s mission.
• Thorough: possesses an unparalleled work ethic; produces complete, even polished products; persistent; mission-focused; asks “Why?” as often as necessary to get to the root of the matter.
• Mature: respects others’ opinions, beliefs, and culture; listens to ideas, shares thoughts, and works independently and together to contribute insights to the company’s leaders.
• Forthright: speaks with conviction; argues based on understanding, respectfully.
• Inquisitive: seeks deeper explanations of how systems work, not the surface-level description of the actors involved; goes beyond “stick-fetching” to connect the unconnected.
• Timely: shows up, ready to think, prepared to get on with the day’s assignments; contributes analytical insights that meet time-sensitive, reasonable requests.
• Honest: knows what’s right, what’s legal, what’s appropriate; acts accordingly.

Required Qualifications

• Due to the sensitive nature of this work, a Department of War (DoW) security clearance is required, and all applicants must provide proof of U.S. Citizenship.
• Must currently possess or have the ability to obtain a DoW Secret security clearance.
• Highschool diploma and 14 years of relevant experience or 
• Associate's degree and 12 years of relevant experience, or
• Bachelor’s degree in a related field and five (5) years of relevant experience or,
• Master’s degree in a related field and no experience. 
• Extensive experience in enterprise network engineering, routing, switching, firewalls, and network security 
• Strong knowledge of DoW cybersecurity frameworks, including RMF, NIST 800-53, STIGs, and Zero Trust concepts 
• Experience with AWS and Azure cloud networking in hybrid enterprise environments 
• Knowledge of high-level cloud networking technologies, including VPC/VNet design, cloud routing, hybrid connectivity, private access, cloud-native security controls, DNS, load balancing, segmentation, and multi-region connectivity 
• Meets DoW 8140 requirements related to privileged access and administrator roles demonstrated understanding as they apply to privileged administrative access and cybersecurity workforce compliance 
• Proficiency with network protocols and technologies such as BGP, OSPF, MPLS, VLANs, VPNs, ACLs, NAT, and QoS 
• Strong experience troubleshooting network performance, traffic flow, firewall, and security issues 
• Experience with network automation and Infrastructure as Code tools such as Ansible and Terraform 
• Experience supporting DoW ATO and authorization processes

Preferred Qualifications

• CCNP, CCIE, CASP+, CISSP, Security+, or similar certifications (within 90 days)
• IAM/IAT certifications aligned with Army 8140 requirements 
• Advanced AWS and/or Azure certifications 
• Experience with enterprise firewalls, IDS/IPS, boundary defense technologies, and cloud-native network security platforms 
• Experience supporting tactical communications or DoW mission networks 
• Familiarity with ATAK, Nett Warrior, or similar operational systems 
• Experience supporting large-scale DoW programs in multi-contractor environments 

ACI Offers a Robust Benefits Package Which Includes:

• Competitive salary
• Comprehensive Medical, Dental, and Vision plans
• Group Life and Voluntary Life Insurance plans
• Retirement Savings Plan
• Paid Time Off
• Paid Parental Leave
• Tuition and Professional Development Reimbursement Program

About
The ACI pay band for this position is a general guideline only and not a guarantee of a specific compensation. Factors that influence the pay offered to a specific candidate for this position include, but are not limited to, federal and state laws; federal government contract labor categories and contract wage rates; relevant prior work experience; a candidate’s knowledge, skills, abilities, and behaviors; geographic location; education; and certifications.ACI is an Equal Employment Opportunity employer.  We do not discriminate on the basis of race, color, creed, religion, age, sex, sexual orientation, gender identity or expression, national origin, marital status, veteran status, disability status or any protected category prohibited by local, state or federal laws.