SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 95,000 - 110,000 / annual
Knox Systems operates the largest Federal & DoD managed cloud, building and securing cloud and AI environments that support the U.S. government's most critical missions. This Cloud Administrator role is responsible for securing, building, and operating multi-cloud infrastructure across AWS, Microsoft Azure, and Google Cloud Platform, including their government regions (AWS GovCloud, Azure Government, and Google Cloud Assured Workloads).
Key responsibilities include:
**Cloud Infrastructure & Security:**
- Manage identity and access across AWS IAM, Microsoft Entra ID, and GCP IAM, implementing single sign-on, multi-factor authentication, least privilege access, and privileged account controls
- Design and secure cloud networks using VPCs, VNets, segmentation, and private connectivity (Direct Connect, ExpressRoute)
- Manage encryption keys using FIPS 140 validated services (AWS KMS, Azure Key Vault, Google Cloud KMS)
- Harden systems to DISA STIGs and CIS Benchmarks, monitor configuration drift, and patch by risk
- Operate within FedRAMP, NIST SP 800-53/800-171, CMMC, and DoD Impact Level requirements up to IL5
- Automate infrastructure using scripting (PowerShell, Bash, Python) and Infrastructure as Code (Terraform, CloudFormation, Bicep)
- Integrate cloud logging (CloudTrail, Azure Monitor, Cloud Logging) with SIEM and support incident response
- Maintain audit-ready documentation including System Security Plans, runbooks, diagrams, and change records
**On-Premises & Employee Infrastructure:**
- Support Knox's on-premises employee infrastructure across multiple office sites, including workstations, local networks, printers, and conference room equipment
- Manage office collaboration software (email, calendars, file sharing, chat, video meetings), including account setup, licensing, and security settings
- Keep workstations patched, hardened, and enrolled in endpoint management and protection tools
- Serve as final escalation point for help desk, troubleshooting complex cross-platform problems
**Requirements:**
- 5+ years of hands-on experience administering cloud infrastructure with production experience in at least two of AWS, Azure, and GCP
- Experience operating in government cloud environments (AWS GovCloud, Azure Government, or Google Cloud Assured Workloads)
- Demonstrated expertise in cloud identity and access management (AWS IAM, Microsoft Entra ID, GCP IAM)
- Experience designing and securing cloud networks with VPCs, VNets, segmentation, and private connectivity
- Practical experience hardening systems to DISA STIGs and CIS Benchmarks
- Working knowledge of FedRAMP, NIST SP 800-53, NIST SP 800-171, CMMC, and DoD Cloud Computing SRG including IL5 requirements
- Proficiency in PowerShell, Bash, and Python scripting
- Experience with Infrastructure as Code tools (Terraform, CloudFormation, Bicep)
- Experience integrating cloud logging with SIEM and supporting incident response
- Strong troubleshooting skills across systems and providers, ability to work methodically under pressure
- Ability to produce clear, audit-ready documentation
- DoD 8140 (formerly 8570) compliant baseline certification (CompTIA Security+ or equivalent)
- U.S. citizenship and active Secret clearance, or ability to obtain one
**Preferred Qualifications:**
- Cloud certifications (AWS Certified Security – Specialty, Azure Administrator Associate AZ-104, Azure Security Engineer AZ-500, Google Professional Cloud Security Engineer)
- Advanced security certifications (CISSP, CCSP)
- Experience supporting FedRAMP authorization, CMMC assessment, or DoD ATO
- Experience with CI/CD pipelines and policy-as-code tools
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field
