Cloud Engineer - Top Secret/SCI Clearance | Moehringen,...

Cloud Engineer - Top Secret/SCI Clearance | Moehringen, GermanyCambridge International Systems, Inc.Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, youll work alongside top talent worldwide, tackling some of todays most complex and critical challenges in defense and security.We are currently seeking a Cloud Engineer to support operations in Moehringen, Germany. This is a full-time, OCONUS position requiring an active DoD Top Secret/SCI, eligibility for NATO Indoctrination and TESA accreditation, other requirements. TESA certification provides significant tax exemptions for U.S. employees stationed in Germany — Cambridge provides benefits like housing, COLA, and dependent education reimbursements, etc.What Youll DoAs a Cloud Engineer, you will play a critical role in providing design, engineering, and operational support across multiple cloud-based environments, ensuring reliability, scalability, and compliance with organizational and mission-critical requirements that serve U.S. government missions overseas. You will:Conduct cloud migration assessments by analyzing existing services and infrastructure to determine cloud viability; develop comprehensive roadmaps and execution plans for successful transitions.Migrate, maintain, and support cloud computing environments, continuously enhancing system durability, performance, and maintainability through automation, monitoring, and best practices.Architect cloud solutions tailored to mission and IT requirements, ensuring the technical viability of new deployments. Leverage Application Development, Infrastructure as Code (IaC), and DevOps methodologies to streamline delivery and operations.Serve as a Subject Matter Expert (SME) in:Cloud technologies (AWS, Azure, GCP, etc.)Cloud enterprise system administrationActive Directory (AD) and Directory Services ReplicationStorage Area Network (SAN) appliancesAuthentication services and Role-Based Access Control (RBAC)Group Policy troubleshooting and Public Key Infrastructure (PKI)Server virtualization (VMware, Hyper-V, etc.)Server monitoring and observability toolsHybrid cloud infrastructure including storage, clustering, data protection, and application platformsLead efforts in the development and management of cloud identities, including:Identity synchronization across multiple cloud providersLicense management and administrationIntegration with existing enterprise identity solutions (e.g., AD FS, Azure AD Connect)Perform detailed analysis of cloud security requirements in alignment with DoD Cloud Computing Security Requirements Guide (SRG), assessing compliance based on:Impact Levels (IL2-IL6)Cloud service models (IaaS, PaaS, SaaS)FedRAMP and DISA STIG compliance frameworksWhat Youll BringRequired Qualifications:Education & Experience: BA/BS + 5 years recent specialized or AA/AS + 7 years recent specialized or a major cert + 9 years recent specialized or 11 years of recent specialized experience.Technical Expertise: Extensive experience supporting Microsoft Azure and Microsoft 365Experience in systems infrastructure design, support, and administrationExperience working with Microsoft Azure and Microsoft 365 in a hybrid environment.Azure AD, storage, and compute including Application Proxy (NDES), Storage Account, Virtual Machines, Virtual Desktop, Backup, Automation, and FunctionsAzure identity management including SSO (SAML), OAuth, MFA, RBAC, PIM, conditional access, monitoring / alerting, device registration, identity protection, and hybrid identity management / AD connect.Azure networking including ExpressRoute, VNet, Virtual WAN, VPN, NSG, Load Balancer, BGP, routing, and firewall concepts (Palo Alto, etc.)Experience collaborating with technical teams of diverse IT related skill sets.Microsoft Certified Azure Administrator Associate or Developer AssociateCertifications:IAT-III Level Certification (CISSP, CASP+ CISM, etc)Must have a current and active DoD Top Secret/SCI security clearance.Proficient with modern IT tools and infrastructure technologiesPreferred (Nice to Have):Ansible and Infrastructure as Code programming skillsAdvanced automated script design, coding, debugging, and maintenance skills (using bash, python, etc.)Experience in CI/CD toolsets (e.g. Terraform, Jenkins, GitLab, etc)Experience with Containerization (Docker) and Container Orchestration (Kubernetes)Azure Solutions Architect Expert CertificationTravel & PassportUp to 10% travel, both CONUS and OCONUS may be required; some overnight stays possible. Must have an active passport to support OCONUS travel and/or living requirements.Work EnvironmentCompliance with vaccination and medical requirements for TDY/OCONUS roles as per

Created: 2025-09-10