Cloud Engineer

A Cloud Engineer job in Cincinnati, OH is currently available at Belcan. This is a hybrid role working two days per week in the Belcan office in Blue Ash. Belcan seeks an experienced AWS Cloud Engineer to build, secure, and maintain scalable cloud infrastructures in collaboration with our Architecture team. This role is responsible for the technical execution of architectural blueprints, ensuring that both internal IT and customer-facing environments meet rigorous federal standards. You will serve as the primary technical bridge between high-level design and operational reality, with a heavy focus on AWS GovCloud and the automated enforcement of FedRAMP and CMMC controls. Additional info: This role requires U.S. citizenship and the ability to obtain or maintain a U.S. DoD Secret security clearance. Job Duties:

• Implement and automate cloud infrastructure based on established blueprints and reference architectures, ensuring all deployments align with federal compliance standards.
• Configure and maintain integration patterns and service connections for hybrid and cloud-native environments to ensure seamless data flow and connectivity.
• Deploy, monitor, and troubleshoot secure AWS GovCloud environments, serving as the technical lead for hands-on configuration.
• Execute multi-account AWS strategies, including the technical setup of account segmentation, Organizational Units (OUs), and automated security boundaries.
• Provision and manage CMMC-compliant cloud foundations, utilizing AWS Control Tower and Guardrails to deploy and maintain secure enclaves.
• Technical Validation: Ensure all deployed cloud resources strictly adhere to FedRAMP, CMMC, and NIST SP 800-171 technical controls through continuous configuration management.
• Audit Support: Partner with security and compliance teams to provide technical evidence, logs, and system configurations required for audit readiness.
• Engineering Delivery: Act as the primary technical resource for internal IT initiatives and external customer delivery, translating architectural designs into functional environments.
• Cross-Cloud Execution: Perform hands-on configuration and technical support within Azure environments as directed by the architectural roadmap.
• Technical Documentation: Produce and maintain detailed "as-built" documentation, configuration scripts (Terraform/CloudFormation), and operational runbooks for stakeholders and auditors

Required Qualifications:

• U.S. citizenship with the ability to obtain and maintain a U.S. DoD Secret security clearance
• Minimum 5 years of experience as a Cloud Engineer or in a senior cloud engineering role
• Demonstrated experience designing and operating AWS GovCloud environments
• Hands-on experience supporting federal cloud deployments
• Strong working knowledge of FedRAMP and CMMC (NIST SP 800-171) requirements
• Experience implementing predictive/detective controls (e.g., Guardrails, SCPs) using AWS Config and GuardDuty for CMMC (NIST SP 800-171 compliance)
• Experience implementing multi-account AWS architecture
• Experience with Landing Zone design to support a multi-account organization
• Experience implementing cloud network segmentation with Transit Gateway, Firewalls and AWS Direct Connect
• Experience with IaC and automation frameworks (e.g., CloudFormation) for deployment and management
• AWS Certified CloudOps Engineer or AWS Certified DevOps Engineer (Professional preferred)
• CompTIA Security+ certification, or the ability to obtain Security+ within 6 months of employment
• Proven ability to define and document cloud standards and blueprints
• Strong written and verbal communication skills
• Bachelor's degree in computer science, Information Technology, or equivalent experience.

Preferred Qualifications & Skills:

• AWS Certified Advanced Networking - Specialty or AWS Certified Security - Specialty
• Experience with Microsoft Azure, particularly in regulated or government-adjacent environments
• Familiarity with Microsoft 365 GCC / GCC High (GCCH) environments and integration considerations
• Experience implementing or operating AWS Control Tower in regulated environments
• Prior experience supporting customer-facing delivery in regulated industries

We provide a competitive pay and benefits package. This position offers a salary range of $105,000 to $130,000. Belcan considers several factors when extending an offer, including but not limited to education, experience, geographic location, and discipline. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. As an employee with Belcan, you will be part of one of the largest engineering firms in the United States. We maintain a small- company atmosphere as well as open communication at all levels of our organization, allowing for much more dynamic decision-making processes. We offer flexible schedules as well as an excellent mentoring system to ensure that you have all the knowledge and tools you need to meet a diverse range of engineering challenges. You will also have opportunities to advance to positions of greater responsibility, including management roles. Your hard work and professional dedication will be rewarded with a competitive compensation package. Build a challenging and rewarding career with an industry leader!