[Remote] Cloud Engineer

Note: The job is a remote job and is open to candidates in USA. Tripoint Solutions is a technology innovator that applies cloud technologies, automation, and data science to support digital transformation in the federal space. The Cloud Engineer will design, implement, and maintain secure, reliable, scalable AWS infrastructure, automate deployments and operations, support data platforms and identity governance, and monitor systems for high availability and rapid incident resolution.

Responsibilities

• Provision, configure, and operate AWS infrastructure including EC2, S3, EBS, RDS, VPCs, subnets, security groups, Route 53, Redshift, AWS Connect, SNS, and CloudFormation
• Author and maintain infrastructure as code, held in version control with automated validation
• Design S3 storage architecture including lifecycle policies, tiering, and retention
• Support the Redshift data warehouse: ingestion from the CRM, the learning management system, and partner institution feeds, and the secure pipelines that unify them
• Administer and secure RDS and Redshift with least-privilege access, encryption, and network isolation
• Implement and maintain IAM policies, KMS key management, and secrets management
• Support identity and access governance including SSO federation, ICAM integration, and least-privilege access review
• Build automated security scanning, dependency validation, and continuous monitoring into CI/CD pipelines rather than running them as separate manual activities
• Support STIG implementation, Risk Management Framework and Authority to Operate activities, and vulnerability remediation on contractual timelines: Critical within 24 hours, High within 7 days, Medium within 30 days
• Maintain deployment runbooks, rollback procedures, and change control artifacts, and sustain a 99 percent availability standard
• Plan and execute capacity scaling as the student population and partner consortium grow
• Drive cloud cost visibility and optimization: tagging coverage, rightsizing, orphaned resource cleanup, and commitment planning
• Automate operational work using Python

Skills

• * Bachelor's Degree in Computer Science, Engineering, IT, or related field
• * 5+ years of experience in cloud engineering or operations
• * Hands-on AWS experience across compute, storage, networking, and identity
• * Demonstrated AWS network engineering capability: VPC design, subnetting, routing, peering, Route 53, load balancing, and VPN or Direct Connect
• * Hands-on infrastructure as code experience with CloudFormation or Terraform
• * Proficiency with IAM policy design, KMS, and least-privilege access models
• * Linux system administration
• * Proficiency in Python for automation and scripting
• * Hands-on CI/CD pipeline experience using GitHub Actions, GitLab CI, Jenkins, or equivalent
• * Experience with Git and version-controlled infrastructure workflows
• * Working knowledge of cloud security principles and hardening practices
• * A demonstrated track record of automating manual operational work rather than sustaining it. Be ready to give examples
• * Camera on. Video is required throughout the interview process and expected for standups, sprint ceremonies, working sessions, and stakeholder meetings
• USA Citizenship is required
• The selected candidate must be currently located in, or willing to relocate to, one of the states supported by Tripoint Solutions corporate offices: AL, AZ, CO, DC, DE, FL, GA, IL, IN, KS, LA, MD, MN, MS, NC, NJ, OH, PA, SC, TN, TX, or VA. (No relocation assistance provided.)
• * AWS Certified Solutions Architect (Associate or Professional) or AWS Certified SysOps Administrator
• * AWS GovCloud or another FedRAMP authorized environment
• * Risk Management Framework, Authority to Operate support, STIG implementation, or vulnerability scanning with ACAS or Nessus
• * Redshift or comparable data warehouse administration
• * AWS Textract or comparable OCR technologies
• * Monitoring and observability with CloudWatch, Splunk, or Elasticsearch
• * Identity and access management: SSO federation, SAML or OIDC, ICAM, or comparable enterprise identity work
• * Zero Trust architecture principles and continuous authorization practices
• * Container orchestration with ECS or EKS
• * Cloud cost management and FinOps
• * Prior federal contract experience

Benefits

• Flexibility in health benefit plan choices
• Company covers most of the monthly health benefit premiums
• Medical, Dental, Vision benefits with a national provider network
• Flexible Spending and Health Savings Accounts (FSA & HSA)
• Company-paid Life and Disability insurance including Short-Term, Long-Term, and Accidental
• Supplemental Insurance
• Paid time off (PTO)
• 11 paid holidays
• 401(k) Retirement Plan
• Professional Development Reimbursement Program to pursue undergraduate, graduate, training, and certifications
• Monthly transportation, parking, and cell phone service reimbursement
• Remote work

Company Overview