<h3>Company Overview</h3><p>By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.</p><p>Cole Engineering Services (CESI), a By Light company, is recognized as a premier provider of modeling and simulation (M&amp;S) training solutions to the Federal Government and industry. Since 2004, CESI has been at the forefront of developing, maintaining, and integrating simulation-based training, serious gaming, technical services, training and other support in live, virtual, constructive, and gaming (LVCG) domains. CESI also designs, builds and runs infrastructure, platforms, applications and processes that enable cyber training for the integrated multi-domain force. Our vision is to become a worldwide full spectrum LVCG and cyber training/analysis developer, integrator and services provider.</p><h3>Position Overview</h3><p>Cole Engineering Services, Inc. is seeking a highly qualified Senior Cloud Infrastructure Engineer to lead implementation, security, and operations of mission-critical cloud environments that power DoD cyber training capabilities and applications. You will manage and develop resilient, compliant, and cost-optimized cloud platforms supporting cyber ranges, training orchestration, and multi-tenant applications in FedRamp approved cloud environments. You will partner closely with cybersecurity, DevSecOps, networking, and training operations teams to deliver secure, scalable capabilities aligned to DoD RMF, DISA STIGs, and the DoD Cloud Computing SRG (Impact Levels IL2–IL6).</p><p>In this role, you will be a key technical leader ensuring the DoD’s cyber training enterprise platforms are secure, resilient, and efficient, enabling cyber operators to execute complex cyber exercises at scale while meeting stringent compliance and mission requirements.</p><p>This is a remote work position with periodic travel (10%) to DoD sites (CONUS) and to CESI Headquarters in Orlando, FL.</p><h3>Responsibilities</h3><h3>Primary Position Functions:</h3><ul><li>Support the design and maintain landing zones using cloud applications such as AWS Organizations, Control Tower, SCP guardrails, Identity and Access Management (IAM) multi-account patterns, and VPC architectures (Transit Gateway, PrivateLink, NAT, IGW) for enclave isolation and cross-domain needs.</li><li>Engineer high-availability, multi-Region solutions leveraging cloud tools such as EC2, EKS/ECS Fargate, RDS/Aurora, DynamoDB, S3/EFS/FSx, Load Balancers, Route 53, and API Gateway.</li><li>Implement Zero Trust-aligned patterns (micro-segmentation, strong identity, continuous verification) consistent with DoD Zero Trust guidance.</li><li>Implement security controls and evidence generation for RMF ATO packages (SSP, SAR, POA&amp;M) in coordination with cyberse