AWS Cloud Engineer
Program Overview
US Citizens only, Secret or TS clearance is a plus, but not required to start
Marathon is seeking a hands-on Senior AWS Cloud Engineer / Cloud Implementation Lead to support cloud implementation, governance, and modernization for the Risk Decision Group (RDG) cloud platform. This role will lead implementation of an AWS capability that helps assess, score, visualize, and improve cloud maturity, security posture, operational readiness, RMF/ATO readiness, and modernization progress across RDG cloud systems.
The initial focus for this role is AWS, but the long-term roadmap includes multi-cloud extensibility, including Azure and other enterprise data sources.
This is a hands-on delivery role including day-to-day operational tasks. The ideal candidate will build, document, troubleshoot, coordinate with stakeholders, support data ingestion workflows, and help scale an MVP into a repeatable cloud governance capability. This role will also help build the target-state cloud architecture across AWS (primary) and Azure (secondary), ensuring solutions meet FedRAMP Moderate security and compliance requirements.
Responsibilities
• Lead day-to-day technical implementation of AWS-based cloud operations and deployment of applications and the MVP.
• Provision and configure compute, storage, database, and other services using Infrastructure as Code (AWS CloudFormation and Terraform).
• Develop and maintain pipeline automation for application and infrastructure deployments.
• Design and package applications using modern containerization and orchestration tooling.
• Configure logging, metrics, tracing, and alerting, applying SRE practices.
• Produce cost-and-capacity reports using FinOps tooling.
• Produce well-structured design documents, diagrams, and hand-over guides.
• Create, manage, and optimize AWS cloud environments and resources (e.g., security groups, VPCs, IAM roles).
• Support AWS implementation using services such as S3, Lambda, API Gateway, CloudWatch, CloudTrail, AWS Config, Security Hub, IAM, KMS, ECS/Fargate, Athena/Glue, QuickSight, or similar services.
• Write scripts to automate repetitive tasks (e.g., with Python, Bash, or PowerShell).
• Implement CI/CD pipelines to streamline deployments.
• Support API integrations and third-party service integrations, such as Databricks.
• Help containerize and package the capability so it can be deployed and expanded across multiple systems and customers.
• Develop technical documentation, onboarding guides, deployment notes, and implementation playbooks.
• Lead cloud migration and modernization efforts, including workload assessment, right-sizing, and cost optimization.
• Implement cloud monitoring solutions to track the performance, availability, and health of applications and infrastructure.
• Respond to incidents, troubleshoot issues, and provide support as necessary.
• Analyze logs, metrics, and cloud monitoring tools (e.g., CloudWatch) to troubleshoot and resolve performance bottlenecks.
• Work closely with application developers, cyber, operations teams, and business stakeholders to understand requirements and deliver cloud solutions.
• Monitor and optimize cloud resource usage to reduce costs while maintaining system performance.
Required Qualifications
• U.S. citizenship required. Candidate must be able to obtain and maintain a Top Secret security clearance, though it is not required to start.
• Bachelor's degree in Computer Science, Information Systems, or a related field (or equivalent experience).
• 8+ years of progressive experience in cloud infrastructure roles.
• 5+ years of experience in AWS cloud engineering or similar roles.
• Deep hands-on expertise designing AWS solutions, including VPC, IAM, EC2, S3, Lambda, RDS, networking/Transit Gateway, KMS, Organizations, Control Tower, PrivateLink, Direct Connect, and Site-to-Site VPN.
• 5+ years of scripting experience (Python, Bash, PowerShell).
• Cloud development experience using Python is highly preferred.
• 3+ years of experience developing AWS policies as code (JSON).
• 3+ years of experience with the AWS CLI.
• 2+ years of experience with AWS cloud-native security services such as GuardDuty, Security Hub, and Inspector.
• Demonstrated experience architecting within FedRAMP Moderate (or FedRAMP High/DoD IL4-5 or similar compliance) environments, including familiarity with NIST 800-53 and NIST 800-171 control families.
• 2+ years of experience and strong understanding of Infrastructure as Code (Terraform, CloudFormation, or similar) and CI/CD pipelines.
• 3+ years of experience with cloud-native and serverless architectures (Lambda, API Gateway, microservices) and containerization.
Preferred Qualifications
• Certification: AWS Certified CloudOps Engineer – Associate.
• Certification: AWS Certified SysOps Administrator – Associate.
• Experience with Databricks implementation and support.
• Azure Administrator Associate certification.
• Active security clearance.
• Experience with AWS AI services (Amazon Bedrock).
• Experience with hybrid/multi-cloud architecture, including Azure (VNets, Azure AD/Entra ID, Azure Policy, ExpressRoute).
• Experience with Microsoft .NET.
• Experience supporting ATO/continuous monitoring processes.
• Familiarity with DevSecOps pipelines.
• Familiarity with AI security and governance frameworks, national security/defense/critical infrastructure missions, and supporting federal agencies or large GovCon programs.
