[Hiring] Cloud Engineer @Tripoint Solutions LLC

Role Description

As a Cloud Engineer, you will be instrumental in designing, implementing, and maintaining scalable cloud infrastructure solutions. You will collaborate closely with cross-functional teams to architect cloud environments that are secure, reliable, and optimized for performance. Your expertise will drive the automation of deployment processes and the integration of cloud services to enhance operational efficiency. You will also monitor and troubleshoot cloud systems to ensure high availability and rapid incident resolution.

Location: Remote. The selected candidate must be currently located in, or willing to relocate to, one of the states supported by Tripoint Solutions corporate offices: AL, AZ, CO, DC, DE, FL, GA, IL, IN, KS, LA, MD, MN, MS, NC, NJ, OH, PA, SC, TN, TX, or VA. (No relocation assistance provided.)

Clearance Requirements: Applicants selected may be subject to a government security investigation. USA Citizenship is required.

Responsibilities

• Provision, configure, and operate AWS infrastructure including EC2, S3, EBS, RDS, VPCs, subnets, security groups, Route 53, Redshift, AWS Connect, SNS, and CloudFormation.
• Author and maintain infrastructure as code, held in version control with automated validation.
• Design S3 storage architecture including lifecycle policies, tiering, and retention.
• Support the Redshift data warehouse: ingestion from the CRM, the learning management system, and partner institution feeds, and the secure pipelines that unify them.
• Administer and secure RDS and Redshift with least-privilege access, encryption, and network isolation.
• Implement and maintain IAM policies, KMS key management, and secrets management.
• Support identity and access governance including SSO federation, ICAM integration, and least-privilege access review.
• Build automated security scanning, dependency validation, and continuous monitoring into CI/CD pipelines rather than running them as separate manual activities.
• Support STIG implementation, Risk Management Framework and Authority to Operate activities, and vulnerability remediation on contractual timelines: Critical within 24 hours, High within 7 days, Medium within 30 days.
• Maintain deployment runbooks, rollback procedures, and change control artifacts, and sustain a 99 percent availability standard.
• Plan and execute capacity scaling as the student population and partner consortium grow.
• Drive cloud cost visibility and optimization: tagging coverage, rightsizing, orphaned resource cleanup, and commitment planning.
• Automate operational work using Python.

Qualifications

• Bachelor’s Degree in Computer Science, Engineering, IT, or related field.
• 5+ years of experience in cloud engineering or operations.
• Hands-on AWS experience across compute, storage, networking, and identity.
• Demonstrated AWS network engineering capability: VPC design, subnetting, routing, peering, Route 53, load balancing, and VPN or Direct Connect.
• Hands-on infrastructure as code experience with CloudFormation or Terraform.
• Proficiency with IAM policy design, KMS, and least-privilege access models.
• Linux system administration.
• Proficiency in Python for automation and scripting.
• Hands-on CI/CD pipeline experience using GitHub Actions, GitLab CI, Jenkins, or equivalent.
• Experience with Git and version-controlled infrastructure workflows.
• Working knowledge of cloud security principles and hardening practices.
• A demonstrated track record of automating manual operational work rather than sustaining it. Be ready to give examples.
• Camera on. Video is required throughout the interview process and expected for standups, sprint ceremonies, working sessions, and stakeholder meetings.

Preferred Qualifications

• AWS Certified Solutions Architect (Associate or Professional) or AWS Certified SysOps Administrator.
• AWS GovCloud or another FedRAMP authorized environment.
• Risk Management Framework, Authority to Operate support, STIG implementation, or vulnerability scanning with ACAS or Nessus.
• Redshift or comparable data warehouse administration.
• AWS Textract or comparable OCR technologies.
• Monitoring and observability with CloudWatch, Splunk, or Elasticsearch.
• Identity and access management: SSO federation, SAML or OIDC, ICAM, or comparable enterprise identity work.
• Zero Trust architecture principles and continuous authorization practices.
• Container orchestration with ECS or EKS.
• Cloud cost management and FinOps.
• Prior federal contract experience.

Benefits

• Medical, Dental, Vision benefits with a national provider network.
• Flexible Spending and Health Savings Accounts (FSA & HSA).
• Company-paid Life and Disability insurance including Short-Term, Long-Term, and Accidental Supplemental Insurance.
• Paid time off (PTO).
• 11 paid holidays.
• 401(k) Retirement Plan.
• Professional Development Reimbursement Program to pursue undergraduate, graduate, training, and certifications.
• Monthly transportation, parking, and cell phone service reimbursement.