Highlights
Our client provider of digital technology and transformation, information technology and services Position: Cloud & DevOps Engineer Location: Aliso Viejo, CA Duration: 6 Months Job Type: Temporary Assignment Work Type: Remote Job Description: Role Overview: The Senior Cloud & DevOps Engineer is a hybrid role that combines cloud infrastructure expertise with DevOps platform engineering to support the AWS GovCloud Landing Zone modernization program. This individual will both architect and operate core cloud infrastructure components including multi-account networking, IAM, and security services while simultaneously building and maintaining CI/CD pipelines, Terraform modules, and Kubernetes-based provisioning workflows.
Numbers & Facts
| Location | Aliso Viejo, CA (Remote) |
| Industry | Computer/IT Services |
| Salary | $72.38 |
| Company Size | 100 to 499 employees |
| Year Founded | 2009 |
| Website | http://www.tekwissen.com/ |
Description
Overview:
TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. Our client provider of digital technology and transformation, information technology and services
Position: Cloud & DevOps Engineer
Location: Aliso Viejo, CA
Duration: 6 Months
Job Type: Temporary Assignment
Work Type: Remote
Job Description:
Role Overview:
- The Senior Cloud & DevOps Engineer is a hybrid role that combines cloud infrastructure expertise with DevOps platform engineering to support the AWS GovCloud Landing Zone modernization program.
- This individual will both architect and operate core cloud infrastructure components including multi-account networking, IAM, and security services while simultaneously building and maintaining CI/CD pipelines, Terraform modules, and Kubernetes-based provisioning workflows.
- The role is ideal for a hands-on engineer who can bridge cloud platform operations with software delivery practices in a FedRAMP/IL2-compliant environment.
Key Responsibilities:
Cloud Infrastructure:
- Design and deploy multi-account VPC architecture: subnets, route tables, security groups, Transit Gateway, and Network Firewall.
- Configure VPC Endpoints, FIPS-compliant AWS service access, and Route 53 DNS (private hosted zones, resolver rules).
- Implement AWS IAM governance: permission boundaries, SCPs, cross-account roles, and federated identity (Entra ID / GCC High).
- Deploy and operationalize AWS security services: Security Hub, GuardDuty, Macie, KMS (FIPS 140-2), and Secrets Manager.
- Set up centralized logging: CloudTrail with Object Lock, AWS Security Lake, VPC Flow Logs, and SIEM integration via Splunk/Cribl.
- Configure AWS Config conformance packs aligned to NIST 800-53 / FedRAMP controls and support AWS Audit Manager evidence collection.
DevOps & CI/CD Platform:
- Build and maintain reusable Terraform modules converted from CloudFormation (LZA Universal Config to multi-account TF modules).
- Deploy and configure GitLab Dedicated for Government and Terraform Enterprise (TFE) including OIDC integration and encrypted state management.
- Implement CI/CD pipelines for CFB application deployments NPE and production environments.
- Design and operate Kubernetes (CKP) provisioning pipelines via GitLab CI/CD and TFE; manage cluster lifecycle across NPE and PROD.
- Apply Kubernetes security hardening: RBAC, network policies, pod security standards, mTLS, and FIPS-compliant configurations.
- Deploy and maintain observability stack: Prometheus, Grafana, and Fluent Bit across CKP clusters.
- Implement supply-chain security controls including container image scanning, SBOM, and admission controllers.
- Support DR exercises, runbook development, and operational readiness activities.
Required Qualifications:
- 8+ years of combined cloud and DevOps/platform engineering experience.
- Strong AWS expertise: VPC, Transit Gateway, Network Firewall, IAM, EKS, Security Hub, GuardDuty, KMS, CloudTrail, and S3.
- Expert-level Terraform skills including module development, TFE, state management, and OIDC integration.
- Deep GitLab CI/CD experience: pipeline authoring, runners, registry management, and GitOps workflows.
- Solid Kubernetes experience (EKS or equivalent): cluster administration, RBAC, Helm, Kustomize, and security hardening.
- Working knowledge of FIPS 140-2 requirements applied to networking, encryption, and secrets management.
- Experience with centralized logging, SIEM integration (Splunk/Cribl), and observability tooling (Prometheus, Grafana, Fluent Bit).
- Familiarity with FedRAMP, FISMA, NIST SP 800-53, or DoD IL2 compliance frameworks.
Preferred Qualifications:
- AWS Certified DevOps Engineer Professional and/or AWS Certified Solutions Architect Professional.
- Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS).
- Experience supporting a FedRAMP, C3PAO, or DoD IL2 authorization process.
- Familiarity with eMASS, AWS Audit Manager, and NIST SP 800-37 Risk Management Framework.
- Exposure to supply-chain security frameworks: SLSA, Sigstore, Cosign, and OPA/Gatekeeper.
- Experience with Terraform Enterprise and GitLab Dedicated for Government deployments.
- Prior engagement on USG or FedRAMP cloud migration or modernization programs.
TekWissen Group is an equal opportunity employer supporting workforce diversity.
About Company
WE THE TEKWISSEN PEOPLE
TekWissen offers you a broader portfolio of services, industry-leading solutions, and the meaningful innovations that give you greater flexibility and speed to respond to market dynamics, reduced costs and risk to improve enterprise performance, and increased productivity to enable growth.
To keep pace with global market demands, TekWissen keeps its finger on the pulse of change. Our organized approach to guiding a project from its inception to closure. Managing projects is becoming more and more important as we enter the digital era. To cope with the pace that this transition demands, a method is required to manage projects so they can yield quality work, while incorporating efficient use of time and resources.
Project involves identifying which quality standards are relevant to the project and determining how to satisfy them.
It is important to perform quality planning during the Planning Process and should be done alongside the other project planning processes because changes in the quality will likely require changes in the other planning processes, or the desired product quality may require a detailed risk analysis of an identified problem. It is important to remember that quality should be planned, designed, then built in, not added on after the fact.
Capabilities and accomplishments in one TekWissen business enhance the opportunity for success in the others. Put simply, TekWissen's unique combination of attributes promotes success.