GovernemntCIO is seeking a Cloud Engineer to provide support for our Customer. The NCI IT infrastructure includes hardware, software, labor, security, and IT policy required to support the continuously changing scientific and administrative activities of the NCI, leveraging both on-premise environments and cloud. GovCIO works with NCI federal staff to provide innovative solutions using Agile, ITIL, and other IT methodologies/best practices that adhere to federal security mandates and National Institutes of Health (NIH)-wide policies. Our on-the-ground staff leads all technical and professional IT services. This includes: Network maintenance and connectivity Storage and data protection Account administration and access control Collaboration tool support Hosting support Database management Hardware/accessory management (desktop/mobile/print) Security Cloud management Service automation platform (ServiceNow) management Professional services such as consultation The Cloud Engineer will work with a team of other cloud engineers and functional experts to fulfill customer cloud support requests, troubleshoot incidents occurring in the cloud environments, and provide recommendations on a variety of cloud subjects. Candidates should be knowledgeable in application deployment approaches, application architectures in the cloud, cloud security, cost estimation, management of cloud environments, and application migrations. Responsibilities: Meet with internal customers requiring IT infrastructure and services, gather and understand their requirements, and assess their workloads for cloud hosting suitability. Analyze the application architectures of existing legacy applications and planned greenfield applications; make architectural and hosting recommendations that are in alignment with AWS best practices, recommendations, and reference architectures; and select suitable AWS services to host these application components. Design applications to be hosted in the cloud that are highly available, cost-optimized, and that meet the customer's functional and performance requirements. Work with internal customers to plan application deployments and execute those deployments using standard DevOps and CI/CD tools with a variety of deployment strategies, including blue-green deployments and rolling deployments. Assist the cloud engineering and broader program teams in developing standard operating procedures for regularly scheduled activities and thoroughly document those procedures. Respond to a variety of different operational alerts including those related to expiring digital certificates, failed backups, security vulnerabilities, inaccessible websites, AWS failures and errors, and crossing of budget thresholds. Work collaboratively with other functional teams when necessary to resolve these conditions. Analyze the architectures and usage patterns of applications planning to migrate to the cloud and forecast the associated cloud hosting costs. Work with internal customers and other functional teams to migrate applications to the cloud in a manner that meets the specific application requirements, for example by minimizing downtime, migrating data, or replacing legacy components with corresponding cloud services. Work with other functional teams in the fulfillment of their duties by providing support and information about resources hosted in the cloud; for example, the candidate must be willing to assist Linux and Windows administrators in monthly patching activities. Develop and enhance CloudFormation and other templates used for managing and establishing cloud environments in a manner consistent with current best practices, for example by checking the templates in and out of the enterprise Git repository. Cooperate with vendors, federal stakeholders, and other contractors to plan and execute enhancements, projects, and other important activities. Bachelor's degree and 10+ years of experience in information technology Detail-oriented approach to work, highly organized, and effective communications skills both orally and written. At least 3 years of hands-on experience working with AWS in a hybrid cloud environment with a mix of applications in the cloud and on-premise Experience implementing infrastructure-as-code or immutable infrastructure in a complex environment Experience working in a highly regulated environment with a focus on security and compliance Advanced understanding of the following AWS services: EC2, S3, ELBs, ALBs, EBS, and VPCs Intermediate understanding of other AWS services such as RDS, Lambda, CloudWatch, Glacier, and others Intermediate understanding of digital storage to include block storage, object storage, and common implementations of each Basic understanding of Windows or Linux systems administration to effectively work with those groups toward common goals and objectives Basic understanding of TCP/IP networking to include routing, restricting ports and protocols, commonly used ports, subnetting, and analysis of network throughput requirements for applications Experience deploying applications to the cloud using DevOps CI/CD toolchains consisting of common build, deployment, testing, and scanning components such as Jenkins, Artifactory, Git, SonarCube, Nessus, etc. Ability to forecast the cost of cloud services based on that application's pattern of usage, architecture, performance, and availability requirements Familiarity with the AWS cloud-native services and common vendor solutions for managing, monitoring, and governing cloud environments including CloudWatch, CloudTrail, AWS Config, CloudCheckr, AWS Organizations, CloudFormation, and others Basic understanding of Docker containers Basic understanding of cybersecurity best practices including concepts such as least privilege, access control, encryption at rest and in transit, packet filtering, and audit logging Experience working with a team using modern work management approaches such as Lean or Agile