Job description

Cloud Network Engineer to help support our DLA program in Springfield, VA. This is a hybrid position, meaning the selected candidate is expected to come into the local DLA office once a week or as dictated by mission requirements. In addition, the Cloud SME will be required to work from the customer facility as needed to perform secure work. As the Cloud SME, you will serve as the Tier 3 technical expert for all enterprise cloud-based services. You will be responsible for providing high-level analysis, design, and strategic guidance for a complex, multi-cloud environment. You will serve as the technical authority on executive-level project teams, providing direction, interpretation, and innovative solutions to exceptionally complex problems. The ideal candidate thinks independently, demonstrates exceptional communication skills, and applies extensive technical expertise to guide the successful completion of major cloud migration and sustainment programs. MEANINGFUL WORK AND PERSONAL IMPACT: Serve as the Tier 3 Subject Matter Expert (SME) for enterprise cloud-based services, providing top-level support and troubleshooting. Lead on-premises-to-cloud migration efforts, acting as the primary technical liaison with Cloud Service Providers (CSPs) including Microsoft Azure, AWS, Oracle Cloud (OCI), and Google Cloud. Engineer and support connectivity between the Secure Cloud Computing Architecture (SCCA) and various CSPs. Establish, sustain, and provide Tier 3 support for enterprise F5 Application Delivery Controllers (ADCs), including the Local Traffic Manager (LTM), Global Traffic Manager (GTM/DNS), and Access Policy Manager (APM) modules. Develop and implement "break and inspect" solutions on F5 devices to meet DISA cloud security requirements. Coordinate with CSPs and application developers to create advanced Layer 7 health monitors for optimal application performance. Support the migration of on-premises applications and data to cloud environments by evaluating migration plans and providing expert guidance on fulfilling SCCA VDMS and VDSS requirements. Conduct analysis of network bandwidth and equipment utilization as it relates to cloud initiatives and provide strategic recommendations to stakeholders. Manage the entire circuit lifecycle, from submitting initial procurement requests in DISA Storefront to configuring, installing, and connecting new equipment and circuits for enterprise Cloud Access Points (CAPs). Develop and maintain comprehensive documentation, including updated design drawings, network maps, device configurations, and maintenance procedures to reflect all changes to the cloud environment. Participate in cloud migration planning sessions and Integrated Product Reviews (IPRs), providing economy-of-scale recommendations to shape an enterprise-level migration strategy. Manage cloud IP address space by submitting and tracking requests to the DoD Network Information Center (NIC). WHAT YOU’LL NEED TO SUCCEED - REQUIRED: CLEARANCE: Active Secret security clearance with a current SSBI or the ability to obtain one. CERTIFICATIONS: DoD 8570 IAT Level III certification (e.g., CASP+ CE, CCNP Security, CISA, CISSP, GCED, GCIH). Cisco Certified Network Professional Enterprise (CCNP-E) certification. Check Point Certified Security Administrator (CCSA) certification. Candidates who do not currently possess CCSA will be required to obtain certification within 6 months of the hire date. EDUCATION: Bachelor’s Degree in a relevant technical field. YEARS OF EXPERIENCE: 10 years of relevant experience. An additional 4 years of experience may be substituted in lieu of a degree. TECHNICAL SKILLS: Hands-on, expert-level experience with multiple CSPs, including Azure, AWS, OCI, and Google Cloud. Deep technical expertise with F5 ADCs, specifically LTM, GTM, and APM modules in a DoD environment. Strong background and practical experience with DoD cloud frameworks, including SCCA, VDMS, and VDSS. Demonstrated experience with enterprise network design, routing, switching, and data center technologies. Familiarity with the circuit provisioning process through DISA Storefront. DESIRED QUALIFICATIONS: CERTIFICATIONS: Certifications applicable to this role include Azure Fundamentals, AWS Cloud Practitioner, Comp TIA Cloud+, Check Point Certified Security Expert (CCSE), Cisco Certified Internetworking Expert -Enterprise Infrastructure (CCIE-EI), CheckPoint Certified Security Administrator (CCSA).

Requirements