Overview:
LMI is seeking an AWS Cloud Data Engineer to support a Department of Defense data modernization effort hosted on a DoD-accredited cloud platform in AWS GovCloud. This role sits at the intersection of cloud data engineering and enterprise data architecture.
The selected candidate will serve in a hands-on technical role responsible for designing, implementing, and validating a cloud-native data ingestion and persistence pipeline. This is a builder role: the work requires moving from architecture to implementation, producing a validated data path that becomes the repeatable standard for enterprise data consumers.
This is not a traditional cloud advisory role. The selected candidate will operate at the intersection of:
- Cloud data engineering and pipeline implementation in AWS GovCloud
- DoD authorization environments - ATO, ICA, and security boundary coordination
- Multi-tenant data platform design and tenant onboarding
You will serve as the primary technical executor on a small, senior team, translating data requirements into working infrastructure on an accredited DoD cloud platform.
LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.
Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.
This position can be remote with potential on-site requirements, but preference will be given to a San Diego, CA candidate. This position also requires an active DoD Secret clearance.
Responsibilities:
Data Ingestion and Pipeline Implementation
- Design, implement, and maintain ingestion paths for multiple data stream types including structured files and APIs from DoD on-premises sources into an S3-backed landing zone using an approved transfer mechanism (e.g., AWS Transfer Family SFTP or equivalent)
- Design, implement, and maintain Lambda-based parsing functions that process incoming data and load structured output into a relational AWS database (Aurora or Amazon RDS)
- Integrate AWS Glue (or similar technology) to support data transformation and pipeline orchestration within the accredited environment
- Establish and document landing zone file handling patterns, such as raw, processed, rejected/error, and archive
Data Persistence and Catalog
- Support relational database selection, schema design, and configuration (Aurora or RDS) aligned to multi-tenant data isolation requirements
- Deploy and configure a data cataloging solution to support schema visibility, metadata management, and data discovery across tenant communities
- Validate scheduled backup configuration for selected databases and relevant data stores
Security and Authorization Coordination
- Coordinate with the platform security team on S3 encryption and access policy requirements, KMS key ownership, CloudTrail audit logging, and IAM role boundaries for tenant access
- Support ATO and ICA activities, including documentation of the inbound data connection from external infrastructure into the cloud environment
- Operate within IL4 and IL6 accredited environments, adhering to platform-established security controls and approval processes
Documentation and Tenant Onboarding
- Author Architecture Decision Records (ADRs) for key technical decisions made during program execution
- Document the tenant onboarding operating model to capture access controls, data boundaries, shared services, cost visibility, and environment segmentation
- Track issues, decisions, and open questions in GitLab in alignment with established project conventions
Qualifications:
- Active Secret clearance
- 4+ years of hands-on AWS cloud engineering experience, with demonstrated work in AWS GovCloud environments
- Proficiency with core AWS data and platform services: S3, Lambda, AWS Glue, RDS/Aurora, IAM, KMS, CloudTrail, CloudWatch, AWS Transfer Family
- Experience designing and implementing data ingestion pipelines for structured file and API-based ingestion patterns
- Familiarity with relational database design, schema management, and backup configuration in cloud environments
- Working knowledge of DoD cloud authorization environments, including Impact Level constraints and ATO/ICA processes
- Ability to operate independently in a fast-paced environment with government technical leads and platform security teams
- AWS certifications: Solutions Architect, Data Engineer, or equivalent
Desired Qualifications
- TS/SCI eligibility
- Experience supporting DoD programs up to IL6
- Familiarity with AWS data catalog solutions, such as AWS Glue Data Catalog, Apache Atlas, or equivalent
- Knowledge of DoD RMF, interconnection agreement (ICA/ISA) requirements, and ATO documentation processes
- Experience onboarding a new tenant community into a shared, multi-tenant DoD cloud platform
- SOF operator or SOF-support background with understanding of SOF core activities and mission sets
