Senior Cloud Engineer

Company Overview Pantheon Data (a Kenific Holding company) is a private, small business based in the Washington, DC, area. Pantheon Data was founded in 2011, initially providing acquisition and supply chain management services to the US Coast Guard. Our service offerings have grown in the past ten years, including infrastructure resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and cybersecurity. We have also grown our customer base to include commercial clients. The company has used this experience to expand our service offerings to other agencies within the Department of Homeland Security (DHS), the Department of Defense (DoD), and other Federal Civilian Agencies. Position Overview Pantheon Data is seekin g a Senior C loud Engineer to lead the operational management and technical support of AWS GovCloud (US) environments. This role is critical in hosting secure federal workloads, including Generative AI (Bedrock) and ML (SageMaker) applications. You will ensure 99.9% availability, maintain compliance with NIST 800-53 Rev 5 and CMMC 2.0 Level 2, and serve as the primary technical escalation point for developers and DevSecOps engineers. Responsibilities Environment Management: Provision and manage multi-account AWS GovCloud environments using Terraform and AWS Organizations, ensuring strict isolation of CUI, commercial data. Cloud Operations & Monitoring: Execute day-to-day operations including automated patching (AWS Systems Manager), backup verification (AWS Backup), and continuous monitoring via Amazon CloudWatch and CloudTrail. Security & Compliance Ops: Perform regular security updates, image hardening (AMI/Container), and vulnerability remediation based on Amazon Inspector and Security Hub findings. Ensure all endpoints meet FIPS 140-3 requirements. CI/CD & Dev Support: Partner with DevSecOps to integrate GitHub Advanced Security (GHAS) into deployment workflows and provide deep-dive troubleshooting for developer-facing cloud environment issues (e.g., IAM policy debugging, VPC routing, and EKS connectivity). Incident Response: Lead root-cause analysis for performance bottlenecks and service interruptions in production and staging environments. Required Skills and Experience Cloud Expertise: 7+ years of hands-on experience with AWS, with at least 3 years specifically in AWS GovCloud. AI/ML Infrastructure: Familiarity with managing LLM infrastructure and RAG pipelines. Infrastructure as Code: Terraform skills, including module development and remote state management in a cross-account environment. Networking & Security: Advanced knowledge of VPC architecture (Transit Gateways, PrivateLink , VPC Endpoints), IAM (ABAC/RBAC), and encryption via AWS KMS. Operational Tooling: Proficiency with AWS Systems Manager (SSM) for fleet management, AWS Config for compliance tracking, and Grafana/CloudWatch for observability. Compliance Frameworks: U nderstanding of FedRAMP High, NIST SP 800-53 , CMMC v2/3 technical controls. Ability to work effectively remotely in cross-functional teams. Ability to meet deadlines and produce quality work. Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint. Preferred Skills and Experience Scripting: Advanced Python or bash for custom automation and Lambda-based lifecycle hooks. Kubernetes: Operational experience with Amazon EKS, specifically cluster upgrades and worker node group troubleshooting. Certification: AWS Certified Solutions Architect or AWS Certified SysOps Administrator – Associate. Leadership: Experience in mentoring junior engineers and contributing to architectural review boards (ARB). Clearance Requirements Applicants selected will be subject to a security investigation and may need to meet eligibility requirements. Secret Clearance is required for continued employment. Work Location: United States - Remote Our company prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely. If the position is remote or hybrid, you may periodically work from a Pantheon Data office location or client site. If this position is assigned to a Pantheon Data office location or client site, you'll work with colleagues and clients in person, as needed for specific client requirements. Compensation The salary range for this position is $100,000 - $150,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Benefits Overview We are always looking for good people! Pantheon Data is committed to providing its employees with competitive salaries and benefits in order to increase employee satisfaction and productivity. In addition to our benefits, we also offer SmartBenefits through the Washington Metro Area Transportation Authority, where you specify an amount of your pre-tax wages be paid directly to your SmarTrip account. In some cases, tuition assistance may be available for continuing education expenses and certifications related to their position. Additional details may be found at https://pantheon-data.com/careers/ Pantheon Data Important Information All qualified applicants will be considered for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law. As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our Talent Team at [email protected] or by phone (571) 363-4020. This company uses E-Verify to confirm each employee's work authorization. For more information, click here E-Verify Participation Poster