Cloud Network Engineer, AWS GovCloud

Salary: $145,600 - 187,200 per year Requirements: We require U.S. citizenship and an active Secret clearance for this program.We need hands-on experience building and operating network connectivity in AWS GovCloud for a federal or Department of Defense customer.We require strong expertise with AWS Network Firewall, including authoring and tuning Suricata rules for stateful east-west and north-south inspection.We need production experience with AWS Transit Gateway, multi-VPC route table architecture, and Direct Connect, including DXGW versus VGW decision-making.We require familiarity with DISA SNAP submissions and NIPRNet IP space allocation.We need the ability to work a hybrid schedule in the Arlington, VA / Washington, DC area.We prefer candidates with prior experience supporting DoD workload migration into AWS GovCloud.We are looking for someone with at least several years of hands-on network engineering experience. Responsibilities: We own end-to-end DoD network connectivity into AWS GovCloud, from initial design through cutover and steady-state support.We lead the BCAP cutover and manage route table design across the Inspection, Egress, and Perimeter VPCs.We execute Transit Gateway changes that onboard new workload accounts into the environment.We develop and refine AWS Network Firewall policy, including Suricata rules for both east-west and north-south traffic inspection.We prepare and submit DISA SNAP packages and coordinate NIPRNet /24 assignments.We guide network design choices across BCAP, Direct Connect, and Transit Gateway, including DXGW versus VGW trade-offs.We document topology, change activity, and operational runbooks to keep the environment auditable and supportable.We serve as the technical authority when questions arise about connectivity, routing, inspection, or traffic flow. Technologies: AWSCloudFirewallFlowSupportNetworkDevOpsSecurity More: We are hiring a hands-on Cloud Network Engineer to serve as our Network SME for the AWS GovCloud program. This is a builder-focused role where you will directly shape and implement the network connectivity that supports Department of Defense workloads. Our team operates in a hybrid model in the Arlington, VA area, with the role also referenced as hybrid remote in Washington, DC 20301. We offer competitive hourly compensation of $70.00 to $90.00, and this position is intended for a U.S. citizen who can maintain an active Secret clearance. last updated 25 week of 2026