Sr. AWS Cloud - Cyber Range Engineer

ECS is seeking a Sr. AWS Cloud - Cyber Range Engineer to join our team in Arlington, VA (Hybrid).

ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division.  This is a hybrid position.

We are seeking a Senior AWS Cloud / Cyber Range Engineer to support the operation, maintenance, security, and modernization of a federal cybersecurity training environment. This role will provide hands-on engineering support for a cloud-hosted Cybersecurity Virtual Learning Environment (CVLE) used to deliver interactive cybersecurity labs and training.

The engineer will initially work alongside the existing support team to learn the environment, architecture, security boundary, operational processes, and lab ecosystem. Following the transition period, the engineer will assume primary responsibility for the day-to-day engineering, operation, availability, security, and continuous improvement of the environment.

This position requires a strong AWS infrastructure engineer who is equally comfortable with cloud operations, automation, virtualization, vulnerability remediation, and federal cybersecurity requirements.

• →Operate, maintain, troubleshoot, and optimize an AWS-hosted cybersecurity training and virtual lab environment.
• →Assume primary engineering responsibility for the platform following completion of the transition and knowledge-transfer period.
• →Maintain availability and reliability of infrastructure supporting cybersecurity training courses, instructors, administrators, and students.
• →Manage AWS infrastructure, including compute, networking, storage, identity and access management, monitoring, and security services.
• →Develop, maintain, test, and deploy Amazon Machine Images (AMIs) and other virtual lab components.
• →Support development of new cybersecurity lab environments and promote approved lab images from development into production.
• →Manage provisioning and deprovisioning of virtual machines and student lab environments.
• →Develop automation to reduce manual configuration, environment setup, reset, provisioning, and administrative activities.
• →Implement Infrastructure as Code and configuration-management practices where appropriate.
• →Monitor platform health, capacity, performance, security, and availability and troubleshoot infrastructure or application-support issues.
• →Maintain the cybersecurity posture of the environment and support continued Authority to Operate (ATO) requirements.
• →Identify and remediate Known Exploited Vulnerabilities (KEVs), critical/high vulnerabilities, security findings, and other government security requirements.
• →Support POA&M remediation and provide technical evidence or documentation necessary to demonstrate implementation of security controls.
• →Coordinate with cybersecurity training developers, course owners, vendors, security personnel, and government stakeholders.
• →Document platform architecture, operational procedures, configurations, dependencies, troubleshooting procedures, and engineering decisions.
• →Identify opportunities to improve platform scalability, resilience, automation, cost efficiency, maintainability, and security.

Salary Range: $165,000 - $190,000

General Description of Benefits 

• →US citizenship with ability to obtain and maintain Public Trust Suitability.
• →Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent professional experience.
• →Approximately 8+ years of relevant infrastructure, cloud, systems, or platform engineering experience.
• →At least 4+ years of hands-on AWS engineering or operations experience.
• →Demonstrated experience operating production AWS environments.
• →Strong experience with AWS services such as EC2, VPC, IAM, S3, CloudWatch, EBS, security groups, load balancing, and related cloud infrastructure services.
• →Experience creating, maintaining, hardening, and deploying Amazon Machine Images (AMIs).
• →Experience with Windows and Linux server administration.
• →Experience supporting virtual machines, virtualized environments, or dynamically provisioned infrastructure.
• →Experience with scripting and automation using tools such as Python, PowerShell, Bash, or Ansible.
• →Experience with Infrastructure as Code technologies such as Terraform, AWS CloudFormation, or equivalent.
• →Demonstrated experience troubleshooting complex cloud infrastructure and application-hosting issues.
• →Working knowledge of cloud security, vulnerability management, patching, logging, monitoring, and configuration management.
• →Experience working within federal cybersecurity requirements or other highly regulated environments.
• →Ability to independently manage a technical environment while collaborating effectively with engineering, security, training, and government stakeholders.