Global Enterprise Services, LLC (GES)

Cloud Engineer

• Design, implement, and secure AWS in alignment with DoD mission objectives and cybersecurity standards.
• Lead configuration, deployment, and management of AWS Identity Center (formerly AWS SSO) to support centralized access management across multiple AWS accounts.
• Architect and implement federated identity and single sign-on (SSO) integrations with Microsoft Entra ID (Azure AD), Okta, or PingFederate.
• Develop and enforce IAM governance frameworks, role-based access controls (RBAC), and service control policies (SCPs) consistent with DoD zero-trust principles.
• Integrate and secure connectivity across AWS and on-premises systems, ensuring consistent identity and policy enforcement in multi-cloud environments.
• Partner with cybersecurity teams to ensure compliance with DISA STIGs, NIST 800-53, FedRAMP High, and DoD Cloud Computing SRG guidelines.
• Leverage Infrastructure as Code (IaC) tools such as Terraform and CloudFormation for automated provisioning and configuration management.
• Provide architectural input for zero-trust, hybrid connectivity, and cross-domain solutions in secure enclaves.
• Develop and maintain comprehensive documentation including architecture diagrams, access models, and compliance mappings.
• Stay current on AWS and multi-cloud innovations relevant to DoD and federal mission systems.

Senior Cloud Engineer – AWS