AWS Infrastructure Engineer

Description

Position Summary

Precise Software Solutions, Inc. is seeking an experienced AWS Infrastructure Engineer to support a large, mission-critical federal modernization program. The AWS Infrastructure Engineer will be responsible for designing, implementing, securing, automating, and supporting cloud infrastructure within Amazon Web Services.

The ideal candidate will have hands-on experience building and maintaining AWS environments for enterprise applications, with strong knowledge of cloud networking, infrastructure automation, security, monitoring, deployment pipelines, and operational support.

This individual will work closely with application architects, developers, database engineers, cybersecurity teams, DevSecOps engineers, and government stakeholders to ensure cloud environments are scalable, resilient, secure, cost-effective, and compliant with federal requirements.

Successful candidates must be able to obtain and maintain a Public Trust background investigation .

This position is contingent upon a contract award

Key Responsibilities

AWS Infrastructure Design and Implementation

• •Design, build, configure, and maintain AWS cloud infrastructure supporting enterprise applications.
• •Provision and manage Development, Test, UAT, Pre-Production, and Production environments.
• •Design scalable, highly available, and fault-tolerant AWS architectures.
• •Configure and manage AWS services such as:
• •Amazon EC2
• •Amazon VPC
• •Elastic Load Balancing
• •Auto Scaling
• •Amazon S3
• •Amazon RDS
• •Amazon EFS
• •Route 53
• •CloudWatch
• •CloudTrail
• •AWS Systems Manager
• •AWS Secrets Manager
• •AWS Key Management Service
• •IAM
• •AWS Certificate Manager

• •Support containerized workloads using services such as Amazon ECS, EKS, or equivalent container platforms.
• •Establish infrastructure patterns and standards that can be consistently applied across environments.

Cloud Networking

• •Design and manage VPCs, subnets, routing tables, gateways, security groups, and network ACLs.
• •Configure connectivity between cloud environments, on-premises systems, and external services.
• •Support VPN, Direct Connect, Transit Gateway, or other hybrid connectivity solutions where applicable.
• •Troubleshoot network connectivity, DNS, routing, firewall, and application access issues.
• •Implement secure network segmentation and least-privilege connectivity models.

Infrastructure as Code and Automation

• •Develop and maintain Infrastructure as Code using tools such as:
• •Terraform
• •AWS CloudFormation
• •AWS CDK

• •Automate provisioning, configuration, deployment, patching, and maintenance activities.
• •Store infrastructure code and configuration artifacts in source control.
• •Develop repeatable processes for creating and updating environments.
• •Reduce manual infrastructure activities through scripting and automation.
• •Support configuration management tools such as Ansible, Chef, Puppet, or similar technologies where appropriate.

DevSecOps and CI/CD

• •Work with DevSecOps teams to integrate infrastructure deployment into CI/CD pipelines.
• •Support automated application and infrastructure deployments.
• •Configure infrastructure components required for build, test, release, and deployment pipelines.
• •Support tools such as Jenkins, GitLab CI/CD, GitHub Actions, AWS CodePipeline, or similar technologies.
• •Implement automated infrastructure validation and deployment controls.
• •Support blue/green, rolling, or other deployment strategies as needed.

Security and Federal Compliance

• •Implement AWS infrastructure consistent with federal security and compliance requirements.
• •Support implementation of controls aligned with:
• •FISMA
• •NIST SP 800-53
• •FedRAMP

• •Configure IAM roles, policies, users, service accounts, and least-privilege permissions.
• •Implement encryption at rest and in transit.
• •Configure secure storage and management of credentials, certificates, keys, and secrets.
• •Support vulnerability remediation, patching, configuration compliance, and security scanning.
• •Assist cybersecurity teams with:
• •Security documentation
• •System Security Plans
• •Vulnerability assessments
• •POA&M remediation
• •Audit evidence
• •Authorization to Operate activities

Support logging and audit requirements using CloudTrail, CloudWatch, and other monitoring tools.

Monitoring and Operational Support

• •Implement and maintain infrastructure monitoring, logging, alerting, and operational dashboards.
• •Monitor availability, performance, capacity, utilization, and infrastructure health.
• •Configure alerts for critical infrastructure conditions.
• •Troubleshoot infrastructure and application hosting issues.
• •Participate in root-cause analysis and incident resolution.
• •Support production operations and scheduled maintenance activities.
• •Develop runbooks, operational procedures, and troubleshooting documentation.
• •Identify recurring operational issues and develop automated or architectural solutions.

Reliability, Resilience, and Disaster Recovery

• •Design infrastructure for high availability and resiliency.
• •Support backup, recovery, and disaster recovery strategies.
• •Implement multi-AZ architectures where appropriate.
• •Support recovery testing and continuity exercises.
• •Define and support Recovery Time Objectives and Recovery Point Objectives.
• •Identify infrastructure single points of failure and recommend remediation strategies.

Capacity and Performance Management

• •Monitor infrastructure utilization and application workloads.
• •Perform capacity planning to support current and projected usage.
• •Recommend appropriate AWS instance types, storage configurations, scaling strategies, and service architectures.
• •Support performance testing and infrastructure tuning.
• •Identify opportunities to improve infrastructure efficiency and application performance.

Cloud Cost Optimization

• •Monitor AWS infrastructure consumption and utilization.
• •Identify underutilized or oversized resources.
• •Recommend cost optimization strategies.
• •Support use of Auto Scaling, reserved capacity, savings plans, lifecycle policies, and other AWS cost-management capabilities where appropriate.
• •Balance cost optimization with application performance, availability, and security requirements.

Documentation and Collaboration

• •Create and maintain infrastructure architecture diagrams using tools such as Visio, Lucidchart, or equivalent.
• •Document:
• •AWS architecture
• •Network architecture
• •Infrastructure configurations
• •Deployment procedures
• •Environment dependencies
• •Security configurations
• •Disaster recovery procedures
• •Operational runbooks

• •Participate in architecture and technical design reviews.
• •Work closely with application development, database, security, testing, and operations teams.
• •Communicate technical issues and recommendations clearly to technical and non-technical stakeholders.
• •Support government technical teams and stakeholders during design, implementation, troubleshooting, and operational activities.

Requirements

• •Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technical discipline, or equivalent combination of education and relevant experience.
• •5+ years of infrastructure engineering, systems engineering, cloud engineering, or related experience.
• •3+ years of hands-on AWS experience supporting enterprise or mission-critical applications.
• •Hands-on experience building and supporting AWS infrastructure.
• •Strong experience with:

o EC2

o VPC

o IAM

o S3

o CloudWatch

o Route 53

o Elastic Load Balancing

o Auto Scaling

• •Experience with AWS networking concepts including subnets, routing, security groups, gateways, and DNS.
• •Experience implementing Infrastructure as Code using Terraform, CloudFormation, or similar tools.
• •Experience with Linux administration.
• •Experience with scripting using Bash, Python, PowerShell, or similar scripting languages.
• •Experience supporting CI/CD pipelines.
• •Experience with Git or ano