Cloud Engineer

About Tripoint Solutions

We are technology innovators, partnered with state-of-the-art providers, such as AWS, ServiceNow, and UiPath, to drive digital transformation in the federal space. TPS teams are bringing automation and data science into areas of the government that are crying out for fresh tech—making positive impacts felt by tens of thousands of users, countless citizens, and all six branches of the military each day. Our Agile teams are responsible for envisioning, launching, and operating the massive data systems and analytics platforms used to manage $14.5B in government procurements and $200B in military real estate assets globally. At TPS, we apply the power of cloud technologies to help the government think smarter and function better—for everyone.

TPS Company Values

• We value and respect each employee's dedicated work and unique contributions as they directly impact who we are and what we do. 
• Your talent and innovative thinking bring leading-edge solutions to our customers.
• Our success is driven by the dedication of our employees.
• Employee-generated solutions have sustained our continued success and customer satisfaction

Benefit Offerings

Tripoint Solutions builds flexibility into health benefit plan choices, covers most of the monthly premiums, and helps employees build a career with impact through our generous professional development program.

We offer all full-time employees:

• Medical, Dental, Vision benefits with a national provider network
• Flexible Spending and Health Savings Accounts (FSA & HSA)
• Company-paid Life and Disability insurance including Short-Term, Long-Term, and Accidental
• Supplemental Insurance
• Paid time off (PTO)
• 11 paid holidays
• 401(k) Retirement Plan
• Professional Development Reimbursement Program to pursue undergraduate, graduate, training, and certifications
• Monthly transportation, parking, and cell phone service reimbursement

Tripoint Solutions is an Equal Opportunity Employer/Veterans/Disabled

About the Role:

As a Cloud Engineer, you will be instrumental in designing, implementing, and maintaining scalable cloud infrastructure solutions. You will collaborate closely with cross-functional teams to architect cloud environments that are secure, reliable, and optimized for performance. Your expertise will drive the automation of deployment processes and the integration of cloud services to enhance operational efficiency. You will also monitor and troubleshoot cloud systems to ensure high availability and rapid incident resolution. 

Location: Remote. The selected candidate must be currently located in, or willing to relocate to, one of the states supported by Tripoint Solutions corporate offices: AL, AZ, CO, DC, DE, FL, GA, IL, IN, KS, LA, MD, MN, MS, NC, NJ, OH, PA, SC, TN, TX, or VA. (No relocation assistance provided.)

Clearance Requirements:

• Applicants selected may be subject to a government security investigation.
• USA Citizenship is required.

Responsibilities:

• Provision, configure, and operate AWS infrastructure including EC2, S3, EBS, RDS, VPCs, subnets, security groups, Route 53, Redshift, AWS Connect, SNS, and CloudFormation.
• Author and maintain infrastructure as code, held in version control with automated validation.
• Design S3 storage architecture including lifecycle policies, tiering, and retention.
• Support the Redshift data warehouse: ingestion from the CRM, the learning management system, and partner institution feeds, and the secure pipelines that unify them.
• Administer and secure RDS and Redshift with least-privilege access, encryption, and network isolation.
• Implement and maintain IAM policies, KMS key management, and secrets management.
• Support identity and access governance including SSO federation, ICAM integration, and least-privilege access review.
• Build automated security scanning, dependency validation, and continuous monitoring into CI/CD pipelines rather than running them as separate manual activities.
• Support STIG implementation, Risk Management Framework and Authority to Operate activities, and vulnerability remediation on contractual timelines: Critical within 24 hours, High within 7 days, Medium within 30 days.
• Maintain deployment runbooks, rollback procedures, and change control artifacts, and sustain a 99 percent availability standard.
• Plan and execute capacity scaling as the student population and partner consortium grow.
• Drive cloud cost visibility and optimization: tagging coverage, rightsizing, orphaned resource cleanup, and commitment planning.
• Automate operational work using Python.

Minimum Qualifications:

• Bachelor’s Degree in Computer Science, Engineering, IT, or related field
• 5+ years of experience in cloud engineering or operations
• Hands-on AWS experience across compute, storage, networking, and identity.
• Demonstrated AWS network engineering capability: VPC design, subnetting, routing, peering, Route 53, load balancing, and VPN or Direct Connect.
• Hands-on infrastructure as code experience with CloudFormation or Terraform.
• Proficiency with IAM policy design, KMS, and least-privilege access models.
• Linux system administration.
• Proficiency in Python for automation and scripting.
• Hands-on CI/CD pipeline experience using GitHub Actions, GitLab CI, Jenkins, or equivalent.
• Experience with Git and version-controlled infrastructure workflows.
• Working knowledge of cloud security principles and hardening practices.
• A demonstrated track record of automating manual operational work rather than sustaining it. Be ready to give examples.
• Camera on. Video is required throughout the interview process and expected for standups, sprint ceremonies, working sessions, and stakeholder meetings.

Preferred Qualifications:

• AWS Certified Solutions Architect (Associate or Professional) or AWS Certified SysOps Administrator.
• AWS GovCloud or another FedRAMP authorized environment.
• Risk Management Framework, Authority to Operate support, STIG implementation, or vulnerability scanning with ACAS or Nessus.
• Redshift or comparable data warehouse administration.
• AWS Textract or comparable OCR technologies.
• Monitoring and observability with CloudWatch, Splunk, or Elasticsearch.
• Identity and access management: SSO federation, SAML or OIDC, ICAM, or comparable enterprise identity work.
• Zero Trust architecture principles and continuous authorization practices.
• Container orchestration with ECS or EKS.
• Cloud cost management and FinOps.
• Prior federal contract experience.