Cloud Systems Engineer

Job not on LinkedIn

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $160k - $190k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Defcon AI

WebsiteLinkedInAll Job Openings

11 - 50 employees

🤖 Artificial Intelligence

🚗 Transport

📦 Logistics

Artificial Intelligence • Transport • Logistics

Defcon AI is a company focused on transforming logistics and supply chain operations using AI-driven technologies. The company addresses disruptions caused by natural disasters, unanticipated events, and opponents through sophisticated software modeling and intelligent agents. Defcon AI aims to integrate next-generation technologies within logistics and decision-making processes to improve response planning in complex and contested environments. Positioned at the convergence of AI, mobility, and logistics, Defcon AI collaborates with partners to provide efficient, reliable, and data-driven solutions tailored to specific needs. The company is committed to enhancing resilience and efficiency in the logistics sector.

📋 Description

• Administer and maintain AWS and Azure environments, including virtual machines, networking, and storage • Deploy, maintain, and optimize AWS EC2, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail • Manage AWS VPCs, subnets, routing tables, security groups, and NACLs • Administer Azure virtual machines, virtual networks and NSGs, storage accounts, Azure Files, Key Vault, Azure Virtual Desktop, and Site Recovery • Build and manage hardened VM images and golden images • Implement and support high availability, auto-scaling, backup, and disaster recovery configurations • Support multi-account and multi-subscription governance structures • Own the Microsoft 365 tenant, including Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and licensing • Administer Conditional Access, MFA, RBAC, least privilege, privileged access, hybrid identity, application registrations, and role assignments • Manage the full user lifecycle: provisioning, onboarding, role changes, offboarding, and access reviews • Manage endpoint compliance, configuration profiles, patching, and device lifecycle through Intune • Administer SAML and SCIM single sign-on and provisioning integrations • Support data governance through Purview, sensitivity labels, and DLP policies • Design and maintain Terraform infrastructure across AWS and Azure • Build reusable secure baseline modules for networking, IAM, logging, monitoring, and encryption • Automate workflows using PowerShell, Bash, Python, and Microsoft Graph API • Integrate provisioning and security controls into CI/CD pipelines and maintain version-controlled infrastructure repositories • Implement drift detection, remediation, and policy-as-code guardrails • Apply CIS Benchmarks and DISA STIG hardening baselines across Linux, Windows, and cloud tenants • Configure and monitor CloudTrail, GuardDuty, Security Hub, Config, Microsoft Defender, and Entra ID logging • Support SIEM integration and incident response • Maintain vulnerability management through patching, remediation tracking, and reporting • Support compliance aligned to NIST SP 800-171, CMMC, and FedRAMP or SOC 2, including assessment evidence collection • Administer Anthropic Claude, ChatGPT, AWS Bedrock, and Microsoft 365 Copilot platforms • Enforce standards for data usage in AI tooling, particularly for CUI or controlled data • Partner with engineering, security, and operations to deliver reliable, scalable services • Produce and maintain architecture diagrams, runbooks, SOPs, and audit evidence artifacts • Contribute to capacity forecasting, resource planning, and cloud cost management

🎯 Requirements

• 5+ years in systems administration, cloud operations, or infrastructure engineering • 3+ years hands-on administering AWS in production, including virtual machine administration, networking, and IAM • 2+ years administering a Microsoft 365 tenant with real admin rights — Entra ID, Exchange Online, Conditional Access, licensing, and user lifecycle • Hands-on Microsoft Azure administration in a production environment • Demonstrated automation of operational workflows using PowerShell, Bash, or Python; working Terraform experience • Strong understanding of IAM, encryption (KMS, TLS), and network segmentation • Experience with Linux (RHEL or Amazon Linux) and Windows Server in a cloud context • Experience working in Department of Defense or Department of War environments and applying their security requirements • Disciplined documentation habits — runbooks, SOPs, and configuration records maintained as a matter of course • US Citizenship Required • All work must be performed within the United States • Preferred: Microsoft 365 GCC High tenant experience • Preferred: Terraform depth including modular design, state management, and leading IaC migrations from legacy tooling • Preferred: Container platform experience — Docker with ECS, EKS, or AKS • Preferred: AWS certifications or Azure equivalents, Microsoft 365 Administrator (MS-102), or CompTIA Security+ • Preferred: AWS Control Tower, Landing Zones, or Azure Landing Zone governance tooling • Preferred: SIEM platform experience (Splunk, Microsoft Sentinel) • Preferred: Administration of AI platforms at the tenant or account level • Preferred: Managed service provider background administering across many client tenants • Preferred: Regulated-industry experience in defense, healthcare, or financial services • Preferred: Active DoD security clearance (Secret or above), or eligibility to obtain and maintain one

🏖️ Benefits

• A fully remote, results-based environment • Competitive salary, bonus and equity package • 100% employer paid, comprehensive health insurance including medical, dental, and vision for you and your family • Unlimited PTO, with your manager's approval • Flexible work environment where you manage your work day • 14 weeks of fully-paid parental leave