Cloud Engineer
Company: Ellumen, Inc
Location: Silver Spring, MD (Remote)
Salary: $110,000 - $120,000 a year
Type: Full-time
Remote: Yes
Posted: 2026-07-07
About this role
Cloud Engineer
- **Education:** Bachelor's Degree
- **Years of Experience:** 5 years
- **Location:** Telework (within the United States)
- **Background Investigation:** Tier 2 / Moderate Risk Background Investigation required
Description: The Cloud Engineer executes day-to-day infrastructure operations, deployment, and maintenance for a complex, mission-critical cloud platform hosted in AWS GovCloud supporting 300+ applications and services across production, staging, and sandbox environments. This role manages EKS clusters, CI/CD pipeline operations, secrets and certificate management, backup and recovery automation, S3 lifecycle management, failover automation, and configuration drift remediation, ensuring all changes are integrated into approved DevSecOps workflows and Infrastructure as Code practices.
Responsibilities:
- Deploy and maintain EKS clusters, VPC infrastructure, IAM configurations, and networking across all platform environments using approved Terraform IaC templates
- Manage day-to-day operations of 3,000+ CI/CD pipelines supporting 130+ monthly production releases across 288 production services
- Implement and operate centralized secrets management ensuring automated rotation for 100% of production secrets where automation is supported and manual rotation at least every 90 days for non-automated secrets
- Manage Public Key Infrastructure operations including TLS certificate issuance, renewal, rotation, storage, and integrity ensuring zero disruption to production services and 100% renewal no later than 30 days prior to expiration
- Configure and maintain AWS Backup and VA-approved Kubernetes-native backup tooling for cross-region snapshot replication with independent per-region encryption
- Manage S3 Cross-Region Replication configurations, lifecycle policies, and Intelligent-Tiering for mission-critical image data
- Execute failover automation procedures: Route 53 health-check configuration, DNS failover activation, and secondary...