Cloud Engineer with Security Clearance

Title:
Cloud Engineer At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions. Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact. Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment. KBR is seeking a highly qualified Cloud Engineer, AWS Administrator and CloudWatch Specialist to support the Aviation Product Lifecycle Management program. The selected candidate will provide engineering, administration, monitoring, automation, and cybersecurity support for secure Amazon Web Services GovCloud environments supporting Navy and Department of Defense aviation systems. The Cloud Engineer will design, administer, secure, and sustain AWS infrastructure operating at Impact Levels 5 and 6. The position will serve as a technical specialist for Amazon CloudWatch monitoring, Windows and Linux environments, containerized applications, Kubernetes orchestration, disaster recovery, and infrastructure automation. The successful candidate will help ensure that AvPLM systems remain secure, resilient, observable, recoverable, and aligned with applicable Navy and DoD requirements, including established Recovery Time Objectives and Recovery Point Objectives. Role &

Responsibilities:
* AWS GovCloud Infrastructure Administration: Administer the lifecycle of AWS GovCloud resources, including Amazon EC2 instances, Linux-hosted containers, Amazon S3 storage buckets, Amazon FSx storage shares, and associated network configurations. Configure and maintain secure Virtual Private Cloud environments, including subnets, route tables, security groups, Network Access Control Lists, and transit gateways. Implement and maintain Identity and Access Management policies, roles, and permissions in accordance with least-privilege principles. Use Infrastructure as Code tools, including Terraform and AWS CloudFormation, to automate infrastructure deployment and configuration. Develop Python and Bash scripts to automate system deployment, patch management, and recurring administrative activities. Use AWS Systems Manager to support configuration management, patching, automation, and administration of cloud-hosted systems.
* Amazon CloudWatch Monitoring and Alerting: Design, implement, and maintain enterprise monitoring solutions using Amazon CloudWatch, CloudWatch Logs, and AWS EventBridge. Develop and automate deployment of the CloudWatch unified agent across virtual-machine fleets to collect operating-system metrics and system logs. Create custom CloudWatch dashboards that display key performance indicators, infrastructure health, system availability, and disaster recovery readiness. Configure CloudWatch log groups, metric filters, alarms, and alerting capabilities. Establish event-driven remediation and notification workflows by integrating CloudWatch Alarms with AWS Lambda, Amazon Simple Notification Service, and applicable IT service management tools. Implement monitoring capabilities for the network traffic, servers, databases, and supporting systems that comprise Commercial Off-the-Shelf Product Lifecycle Management applications. Monitor system performance and identify conditions that may affect availability, reliability, security, or mission operations.
* Windows Server Administration: Deploy, configure, administer, and sustain Windows Server environments hosted on Amazon EC2. Support the availability, security, and performance of cloud-hosted Windows systems. Administer Active Directory, Group Policy Objects, Domain Name System services, and Internet Information Services. Integrate Windows Server environments with DoD Public Key Infrastructure to support Common Access Card authentication. Perform operating-system patching, upgrades, vulnerability remediation, and recurring maintenance using AWS Systems Manager, Windows Update Services, or other approved tools.
* Container and Kubernetes Administration: Design, de