Cole Engineering Services, Inc. (CESI), a By Light Company

Infrastructure Engineer

• Support the design and maintain landing zones using cloud applications such as AWS Organizations, Control Tower, SCP guardrails, Identity and Access Management (IAM) multi-account patterns, and VPC architectures (Transit Gateway, PrivateLink, NAT, IGW) for enclave isolation and cross-domain needs.
• Engineer high-availability, multi-Region solutions leveraging cloud tools such as EC2, EKS/ECS Fargate, RDS/Aurora, DynamoDB, S3/EFS/FSx, Load Balancers, Route 53, and API Gateway.
• Implement Zero Trust-aligned patterns (micro-segmentation, strong identity, continuous verification) consistent with DoD Zero Trust guidance.
• Implement security controls and evidence generation for RMF ATO packages (SSP, SAR, POA&M) in coordination with cybersecurity teams.
• Apply DISA STIGs (OS, DB, Kubernetes, Container) and SRG requirements for workloads at IL2–IL6.
• Tailor and automate STIG application using IaC and configuration management.
• Integrate encryption and key management with cloud tools such as AWS KMS/HSM; enforce IAM least privilege, SCPs, permission boundaries, ABAC, and robust secrets management.
• Implement cloud logging and metrics tools such as CloudTrail/CloudWatch/GuardDuty/Config for comprehensive audit and detection.
• Align architectures with FedRAMP Moderate/High baselines when required and ensure boundary compliance for controlled workloads.
• Develop secure connectivity (AWS Direct Connect/VPN), hybrid routing, and segmentation; implement TLS mutual auth, certificate management, and private service endpoints.
• Design logging and telemetry pipelines (CloudWatch, OpenTelemetry, Kinesis, S3, SIEM integration such as Splunk/ELK) with retention, metadata/tagging, and data lifecycle policies.
• Own SLOs/SLAs for platform services.
• Implement autoscaling, health checks, and proactive capacity management.
• Lead cost management and alerting practices of cloud environments in coordination with project leads.
• Provide Tier 3 support, on-call rotations during exercises, and incident response coordination with cybersecurity and training operations.
• Collaborate with agile teams and product owners to translate training requirements into platform capabilities.
• Provide mentorship for junior engineers.
• Establish standards, design reviews, and repeatable processes.
• Present cloud solutions to project leadership and accreditation authorities.

Senior Cloud Infrastructure Engineer

Full-stack Engineer

• Manage and execute the technical activities required to design, develop, integrate, test, and field applications and cloud computing resources to meet the USCG TDL Owner's deployment timelines and goals
• Develop and maintain Application Program Interfaces (APIs) required for USCG information systems to pull data from CG-OWL
• Customize CG-OWL User Interfaces for USCG use
• Gather CG-OWL user feedback, assess validity, and present to Effort POC to collaboratively add and prioritize features to the Product Roadmap / Backlog
• Conduct Operational and User Acceptance Testing
• Monitor and report to the USCG, CG-OWL performance metrics as outlined in the USCG Modernized Learning Management System CONOPS to ensure compliance
• Report performance metrics to USCG once per month, including any planned or unplanned downtimes and a summary of actions to address the downtime, and future mitigating factors
• Address all defects found in the MLMS system, or inform third parties of any defects found
• Keep process guides updated for System Administrators in accordance with the latest process or software release
• Provide Tiered 3 Support for CG-OWL Monday through Friday 0900-1700 ET excluding Federal Holidays
• Utilize the primary USCG ticketing system, currently CGFixIT (BMC Remedy), to properly document and respond to all incidents, problems, service requests, and maintenance IAW applicable USCG process guides, policies, and procedures

Senior Cloud Infrastructure Engineer

Software Engineer