SCI Cloud Engineer

DescriptionThe Leidos Digital Modernization Sector has an exciting career opportunity for a highly skilled Azure Cloud Engineer with deep expertise in networking and infrastructure automation in Colorado Springs CO to support the US Space Force's Space Systems Command (SSC), Operational Command and Control Acquisition Delta, known as Kobayashi Maru. This "On-Site" role is a hands-on engineering role. This role is instrumental in the development and deployment of mission critical software for space defense, space domain awareness, and enabling data services. The ideal candidate is self-sufficient, execution-focused, and capable of collaborating across teams to deliver secure, scalable, and performant cloud infrastructure solutions.Primary ResponsibilitiesDesign, implement, and maintain Azure infrastructure (compute, storage, networking, identity, and governance) using Infrastructure as Code (IaC).Architect and configure virtual networks (VNets), network security groups (NSGs), ExpressRoute, VPN gateways, private endpoints, and load balancers in Azure.Integrate and optimize hybrid cloud connectivity (on-prem to Azure), ensuring performance, redundancy, and security compliance.Implement and manage Azure Firewall, Application Gateway, and Azure Front Door configurations for secure and resilient application delivery.Automate provisioning and configuration using Terraform, Bicep, or ARM templates with CI/CD integration (GitHub Actions, Azure DevOps, or GitLab).Collaborate with application and security teams to enforce zero trust and network segmentation principles.Troubleshoot and optimize DNS, routing, latency, and firewall rules across hybrid environments.Support monitoring, alerting, and performance optimization via Azure Monitor, Log Analytics, and Network Watcher.Maintain compliance with DoD/NIST, FedRAMP, or enterprise security frameworks (if applicable).Hybrid Cloud Infrastructure ManagementDesign, deploy, and manage virtual cloud server infrastructures across hybrid environments (on-premises and cloud).Maintain and optimize virtualization platforms, such as VMware ESXi, Hyper-V, or cloud-native virtualization solutions.Implement and manage Infrastructure-as-Code (IaC) tools such as Terraform, Ansible, or CloudFormation to automate deployments and configurations.Cloud Environment SupportCollaborate with cross-functional teams to provision, maintain, and scale cloud resources in platforms like AWS, Azure, Google Cloud Platform (GCP), or Oracle Cloud Infrastructure (OCI).Monitor cloud resource utilization, ensuring cost efficiency and scalability.Troubleshoot issues and perform root cause analysis to resolve system and application-related problems.DevSecOps IntegrationWork within a DEVSECOPS framework to ensure infrastructure meets security, compliance, and operational standards.Support CI/CD pipelines and integrate infrastructure automation into the development lifecycle.Implement containerization and orchestration technologies, such as Docker and Kubernetes, to support microservices architectures.Performance Optimization and MonitoringConfigure and maintain monitoring tools to ensure availability and performance of systems and applications.Basic QualificationsBS degree in computer science, software engineering, STEM or Information Technology and 8+ years of prior relevant experience or Masters with 6+ years of prior relevant experience, additional years of experience may be accepted in lieu of a degree.US Citizen and Possession of a current Active DoD TS/SCI Clearance.Minimum 10 years of experience in Azure Cloud Engineering or Cloud Infrastructure roles.Strong expertise in Azure networking — including ExpressRoute, Virtual WAN, Peering, Load Balancers, Application Gateway, Azure Firewall, and Private Link.Proficiency with Terraform, Bicep, or ARM templates.Deep understanding of networking protocols (TCP/IP, DNS, DHCP, VPN, routing, subnetting, BGP).Hands-on experience with CI/CD pipelines for infrastructure deployments.Familiarity with security and identity in Azure (Azure AD, RBAC, Managed Identities).Experience with SASE, ZScaler, Palo Alto Prisma, or Cloudflare network integrations.Familiarity with Kubernetes networking (CNI, service mesh) or container-based deployments.Understanding of security frameworks (NIST, CIS Benchmarks, Zero Trust).Excellent troubleshooting and problem-solving skills in complex, hybrid environments.Strong documentation and collaboration habits.Possession of at least one of the following certifications:Azure Network Engineer Associate (AZ-700)Azure Solutions Architect Expert (AZ-305)Azure Administrator Associate (AZ-104)Preferred QualificationsMaster's degree in computer science.Possession of at least one of the following certifications:Azure Solutions Architect Expert (AZ-305)Azure Hybrid Cloud Administrator Expert (AZ-800/801)Azure Network Engineer Associate (AZ-700)VMWare VCP-Data Center Virtualization (DCV)Pay RangePay Range $104,650.00 - $189,175.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.Commitment to Non-DiscriminationAll qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.We're not looking for perfectly polished resumes or perfect fits. We're looking for people who break limits, ask hard questions, and don't wait to be told what's next. At Leidos, we're not following the roadmap — we're redrawing it.J-18808-Ljbffr