Senior Cloud Engineer Security Clearance

Position: Senior Cloud Engineer with Security Clearance
Who we are:

Tria Federal delivers digital services and technology solutions that support the health and safety of veterans, service members and civilians. For two decades, federal agencies have relied on Tria companies to advance their critical missions and modernize their systems, so that they can uphold their commitment to the American people. Today, we are pushing the boundaries of possibility through partnerships and investments in artificial intelligence and emerging technologies, developing solutions for the biggest challenges that government will face tomorrow.

We are proud to employ and support military veterans who bring mission-first mindset, technical expertise, and leadership qualities that strengthen our work. Veterans, transitioning service members, and military spouses are strongly encouraged to apply.

Job Description:

Tria Federal supports the Department of Labor, Bureau of Labor Statistics (DOL BLS). In this position you will be responsible for supporting cloud infrastructure development, cloud operations, and cloud environment administration across the BLS Cloud Landing Zone (CLZ) and Microsoft 365 tenant. You will perform all the duties of a Cloud Engineer 2 with increased technical proficiency and working knowledge. Additionally, you may lead and coach lower-level personnel to ensure proper cloud governance, automation, system security, cost efficiency, and operational reliability in accordance with BLS standards and procedures.

Basic Requirements:
Education & Eligibility
* Bachelor's degree or 6 years of relevant cloud engineering experience
* Must be a U.S. Citizen or Green Card Holder who has resided in the U.S. for the past 3.5 years Certifications (Preferred)
* AWS Solutions Architect Associate, AWS Sys Ops, Azure Administrator, Azure Solutions Architect, Security+, or similar cloud certifications Required Technical Experience
Five (5) years of progressive experience covering cloud engineering responsibilities such as:
* Cloud infrastructure implementation, operations, and administration within AWS and/or Azure environments
* Managing multi-account cloud strategies, VPC/network topology, access management, and compliance guardrails
* Supporting enterprise cloud solutions using Power Shell, automation scripting, and platform administration
* Managing Microsoft 365 services including AD/Cloud Identities, Exchange, Teams, ADFS, and Intune Three (3) years of hands-on experience with:
* Infrastructure as Code (IaC) tooling such as AWS Cloud Formation, Terraform, or ARM templates
* Dev Ops and CI/CD integrations for automated deployments and cloud resource provisioning
* Implementing security, compliance, and cloud policy enforcement aligned to frameworks such as NIST 800-53 Rev 5 Two (2) years of experience in:
* Cloud cost analysis, cost anomaly reporting, and cost mitigation recommendations (Fin Ops practices)
* Power Platform administration including environment management, solution deployment, and security configuration
* Cloud change management and documentation requirements (LANCM or equivalent) Additional Knowledge & Skills
* Understanding of IAM policies, identity security, encryption, ADFS integrations, ACLs, and regulatory compliance controls
* Ability to automate operational workflows using Python, Bash, Power Shell, or similar tools
* Experience maintaining security monitoring and auditing (Cloud Trail, Cloud Watch, Security Hub, etc.)
* Strong written communication including updating runbooks, SOPs, DR plans, and configuration documentation Responsibilities:
* Maintain the health, security, and operational efficiency of the BLS Cloud Landing Zone (CLZ) and Microsoft cloud tenants
* Support transition of on-premise applications to cloud-based alternatives within the CLZ
* Perform automated infrastructure provisioning using IaC and remediate configuration drifts
* Manage AWS Organizations, Service Control Policies (SCPs), guardrails, and shared services infrastructure
* Integrate cloud environments with CI/CD pipelines for automated deployments
* Implement security best practices, including IAM hardening, logging, encryption, and network access controls
* Review and mitigate security, compliance, and configuration findings within required timelines
* Review cost anomaly alerts and consumption reports; recommend mitigation strategies
* Support cloud architecture request tickets and provide designs within required SLAs
* Manage tenant access, configuration, and administration across Microsoft 365 services
* Lead Power Platform implementation, testing, and integration planning activities
* Update system documentation, runbooks, SOPs, and disaster recovery materials within defined timelines
* Troubleshoot and resolve cloud infrastructure, security, deployment, and identity issues
* Enforce change control procedures using LANCM for all cloud system modifications except emergencies ABILITY TO OBTAIN A DOL PUBLIC TRUST CLEARANCE (Must be a U.S. Citizen or Green Card Holder residing in…