AWS Infrastructure Engineer

Description:

Position Summary

Precise Software Solutions, Inc. is seeking an experienced AWS Infrastructure Engineer to support a large, mission-critical federal modernization program. The AWS Infrastructure Engineer will be responsible for designing, implementing, securing, automating, and supporting cloud infrastructure within Amazon Web Services.

The ideal candidate will have hands-on experience building and maintaining AWS environments for enterprise applications, with strong knowledge of cloud networking, infrastructure automation, security, monitoring, deployment pipelines, and operational support.

This individual will work closely with application architects, developers, database engineers, cybersecurity teams, DevSecOps engineers, and government stakeholders to ensure cloud environments are scalable, resilient, secure, cost-effective, and compliant with federal requirements.

Successful candidates must be able to obtain and maintain a Public Trust background investigation.

This position is contingent upon a contract award

Key Responsibilities

AWS Infrastructure Design and Implementation

• Design, build, configure, and maintain AWS cloud infrastructure supporting enterprise applications.
• Provision and manage Development, Test, UAT, Pre-Production, and Production environments.
• Design scalable, highly available, and fault-tolerant AWS architectures.
• Configure and manage AWS services such as:
  • Amazon EC2
  • Amazon VPC
  • Elastic Load Balancing
  • Auto Scaling
  • Amazon S3
  • Amazon RDS
  • Amazon EFS
  • Route 53
  • CloudWatch
  • CloudTrail
  • AWS Systems Manager
  • AWS Secrets Manager
  • AWS Key Management Service
  • IAM
  • AWS Certificate Manager
• Support containerized workloads using services such as Amazon ECS, EKS, or equivalent container platforms.
• Establish infrastructure patterns and standards that can be consistently applied across environments.

Cloud Networking

• Design and manage VPCs, subnets, routing tables, gateways, security groups, and network ACLs.
• Configure connectivity between cloud environments, on-premises systems, and external services.
• Support VPN, Direct Connect, Transit Gateway, or other hybrid connectivity solutions where applicable.
• Troubleshoot network connectivity, DNS, routing, firewall, and application access issues.
• Implement secure network segmentation and least-privilege connectivity models.

Infrastructure as Code and Automation

• Develop and maintain Infrastructure as Code using tools such as:
  • Terraform
  • AWS CloudFormation
  • AWS CDK
• Automate provisioning, configuration, deployment, patching, and maintenance activities.
• Store infrastructure code and configuration artifacts in source control.
• Develop repeatable processes for creating and updating environments.
• Reduce manual infrastructure activities through scripting and automation.
• Support configuration management tools such as Ansible, Chef, Puppet, or similar technologies where appropriate.

DevSecOps and CI/CD

• Work with DevSecOps teams to integrate infrastructure deployment into CI/CD pipelines.
• Support automated application and infrastructure deployments.
• Configure infrastructure components required for build, test, release, and deployment pipelines.
• Support tools such as Jenkins, GitLab CI/CD, GitHub Actions, AWS CodePipeline, or similar technologies.
• Implement automated infrastructure validation and deployment controls.
• Support blue/green, rolling, or other deployment strategies as needed.

Security and Federal Compliance

• Implement AWS infrastructure consistent with federal security and compliance requirements.
• Support implementation of controls aligned with:
  • FISMA
  • NIST SP 800-53
  • FedRAMP
• Configure IAM roles, policies, users, service accounts, and least-privilege permissions.
• Implement encryption at rest and in transit.
• Configure secure storage and management of credentials, certificates, keys, and secrets.
• Support vulnerability remediation, patching, configuration compliance, and security scanning.
• Assist cybersecurity teams with:
  • Security documentation
  • System Security Plans
  • Vulnerability assessments
  • POA&M remediation
  • Audit evidence
  • Authorization to Operate activities
• Support logging and audit requirements using CloudTrail, CloudWatch, and other monitoring tools.

Monitoring and Operational Support

• Implement and maintain infrastructure monitoring, logg…