About this role
AWS Infrastructure Engineer (Architect-Level) — RHEL 7 to RHEL 8 Migration
Overview
The AWS Infrastructure Engineer supports the Operations workstream of a large federal client's technology operations, maintenance, and enhancement program, providing infrastructure architecture and automation for a RHEL 7 to RHEL 8 server migration. This is an architect-level role: the engineer designs the AWS infrastructure-as-code approach and CI/CD automation that the delivery team executes, rather than performing day-to-day, hands-on-keyboard configuration.
Working alongside the Solutioning Architect, DevOps Engineers, and Systems Engineers, this person architects the AWS account structure, instance provisioning, and network connectivity needed to stand up RHEL 8 servers across multiple non-production and production environments, and defines the Infrastructure-as-Code (Terraform, AWS CloudFormation) templates and standards used to build and repeat that migration across each environment tier. The role also owns the architecture for automating the CI/CD pipeline that builds, tests, and promotes infrastructure and application changes up through Production.
Success in this role requires deep, architecture-level expertise in AWS infrastructure and Infrastructure-as-Code (Terraform and/or CloudFormation), strong familiarity with DevSecOps and Agile delivery practices, and the ability to translate migration requirements into a solution design that aligns with the client's governance and security standards.
Key Functions
• Architect the AWS Infrastructure-as-Code approach (Terraform, CloudFormation) used to stand up and configure RHEL 8 servers across multiple non-production and production environments.
• Design AWS account structure, EC2 instance provisioning, VPC configuration, and network connectivity needed to support the RHEL 7 to RHEL 8 migration.
• Account for the system's 30+ internal and external partner integrations when designing secure interface patterns for a FedRAMP-authorized (GovCloud) environment, ensuring those patterns are repeatable across the full range of non-production and production environment tiers.
• Own the architecture for automating the CI/CD pipeline (e.g., Jenkins, GitHub) that builds, tests, and deploys infrastructure and application changes up through Production.
• Define reusable Terraform and CloudFormation templates and IaC standards to ensure consistency and repeatability as the migration approach is repeated across each environment tier.
• Help define the environment tier build-out sequence and validation strategy — determining which environment tier is stood up and migrated first and how it is validated before promoting the migration to the next tier.
• Provide technical direction and design review to DevOps Engineers and Systems Engineers executing infrastructure automation and RHEL 8 server configuration.
• Support the architecture for standing up and configuring RDS instances as part of the environment migration, in coordination with the Database Administrator.
• Support planning for Jenkins job migration and DNS cutover (F5) activities at an architecture and design level.
• Incorporate vulnerability and cloud security posture scanning (e.g., Nessus, Turbot) into the infrastructure architecture.
• Participate in and help lead technical discovery and design sessions with application, infrastructure, security, and cloud engineering stakeholders.
• Ensure infrastructure designs comply with the client's technical reference model, ATO/POA&M requirements, and DevSecOps best practices.
• Help evaluate which existing POA&Ms are addressed or closed as a result of the RHEL 7 to RHEL 8 migration.
• Support performance testing, monitoring, and remediation activities by providing infrastructure-level analysis and recommendations.
• Document architecture decisions, infrastructure designs, and runbooks in Confluence and Jira.
• Coordinate with the Solutioning Architect and Operations Manager to ensure infrastructure delivery aligns with the overall migration timeline.
• Maintain positive working relationships with the federal client, delivery teams, and technical stakeholders while supporting mission-critical systems.
Minimum Qualifications
• Bachelor’s degree and 5 years of relevant experience.
• An additional 2 years of experience (7 years total) with an Associate’s Degree in lieu of a Bachelor’s Degree.
• An additional 4 years of experience (9 years total) with a High School Diploma in lieu of a Bachelor’s Degree.
• Demonstrated experience architecting AWS infrastructure using Infrastructure-as-Code, with hands-on expertise in Terraform and AWS CloudFormation.
• Experience designing and automating CI/CD pipelines that deploy changes up through Production (e.g., Jenkins, GitHub/GitHub Actions).
• Experience architecting AWS account structures, VPCs, instance provisioning, and network connectivity.
• Experience designing secure integration and interface patterns within a FedRAMP-authorized (GovCloud) environment.
• Experience with Red Hat Enterprise Linux (RHEL) server infrastructure, including OS version migrations.
• Experience incorporating vulnerability and cloud security posture management scanning (e.g., Nessus, Turbot) into infrastructure architecture and design.
• Experience supporting DevSecOps practices and Agile delivery.
• Ability to translate infrastructure and migration requirements into architecture-level solution designs and documentation.
• Strong analytical and technical leadership skills — this is an architecture- and design-focused role that provides technical direction rather than day-to-day, hands-on configuration.
• Excellent verbal and written communication skills, with the ability to lead technical discussions across cross-functional and federal stakeholder teams.
• Strong attention to detail and organizational skills.
Preferred Qualifications or Skills
• Experience supporting federal government systems.
• Experience with AWS RDS / PostgreSQL infrastructure.
• Experience automating certificate renewal and installation using Venafi.
• Familiarity with federal agency technical reference models and ATO/POA&M processes.
• AWS certification (e.g., AWS Certified Solutions Architect – Professional).
• Experience using Jira and Confluence, including version-controlled documentation practices.
• Experience supporting large-scale server or operating system migration projects.
• Familiarity with F5 and DNS cutover activities.
Position Details
• Employment type: Full-Time, W2
• Location: 100% Remote (US-based)
• Hours: 40 hours/week with availability during core business hours of 8am–5pm ET
• Start date: On or around October 1, 2026
• Eligibility: Must be eligible to obtain a Public Trust clearance
$96,000 - $128,000