Senior Network and Cloud Engineer – AWS Hybrid Infrastructure

Concept Solutions, LLC

. Support the Federal Aviation Administration Command Control and Communications office .

Posted 9/25/2026full-timeUnited StatesSenior💰 $160,000 - $170,000 per yearWebsite

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityFirewallsPythonSplunkSwitchingTCP/IPTerraform

About the role

Key responsibilities & impact

Support the Federal Aviation Administration Command Control and Communications office
Design, implement, maintain, and improve enterprise LAN, WAN, and metropolitan network services
Configure and troubleshoot routers, switches, firewalls, load balancers, network segmentation, routing protocols, and high-availability designs
Assess capacity, performance, resiliency, carrier diversity, and technical lifecycle risks
Coordinate server-to-network integration and reliable access for local and remote users
Design, build, and support secure connectivity between FAA on-premises environments and AWS
Lead network portions of cloud migration and modernization efforts, including connectivity planning, routing, segmentation, firewall policy, cutover, testing, and rollback preparation
Configure and maintain AWS VPC components, shared connectivity, and multi-account landing-zone networking
Implement redundant connectivity and disaster-recovery network designs
Support AWS utilization and cost-efficiency improvements
Implement and validate network security controls supporting federal compliance and Zero Trust principles
Configure and support firewalls, IPsec tunnels, client VPN services, 802.1X, AWS security groups, Network Firewall or WAF, logging, and alerting
Partner with cybersecurity staff on assessments, evidence collection, vulnerability remediation, configuration reviews, and continuous monitoring
Provide tier-three troubleshooting for complex outages and performance issues
Use packet analysis, flow data, logs, and monitoring platforms to determine root cause and restore service
Automate network and AWS configuration tasks using infrastructure-as-code, configuration management, scripting, version control, and deployment pipelines
Maintain diagrams, configurations, procedures, implementation plans, rollback plans, and operational documentation
Validate patches, firewall changes, automation, and cloud network modifications in a segregated test environment
Coordinate with telecommunications carriers and internet service providers
Mentor junior engineers and share operational knowledge
Participate in an after-hours on-call rotation and respond to critical network incidents

Requirements

What you’ll need

Bachelor's degree in computer science, electrical engineering, information technology, or a related technical discipline
Eight additional years of directly relevant network engineering experience may substitute for the degree
Minimum of fifteen (15) years of progressive, relevant experience in enterprise-scale network design, implementation, and operations
At least three years of recent hands-on experience supporting AWS networking or hybrid connectivity in an enterprise, federal, or similarly regulated environment
Demonstrated experience with Cisco routing and switching, TCP/IP, BGP or OSPF, VLANs, high availability, and enterprise firewalls
Hands-on experience with AWS VPC networking and at least two of Direct Connect, Transit Gateway, Site-to-Site VPN, or Route 53
Experience troubleshooting complex network incidents using packet captures, flow data, logs, and network monitoring tools
Experience working in a federal contracting, government, defense, or other highly regulated environment
Ability to obtain and maintain a Secret security clearance
Ability to meet the position's on-site, travel, and on-call requirements
Ability to explain technical risks and recommendations clearly to engineers, program leaders, customers, and external vendors
Active Secret or higher security clearance preferred
Experience with AWS GovCloud, multi-account environments, Control Tower, AWS Organizations, or enterprise landing zones preferred
Experience with Juniper routing, Cisco Catalyst or Nexus, Palo Alto or Cisco Secure Firewalls, F5 BIG-IP, SD-WAN, MPLS, or network virtualization preferred
Working knowledge of Terraform, AWS CloudFormation, Ansible, or Python, with Git and controlled CI/CD process experience preferred
Experience supporting NIST SP 800-53, FISMA, FedRAMP, STIG implementation, vulnerability remediation, continuous monitoring, or ATO evidence activities preferred
Experience with AWS security and visibility services preferred
Experience with SolarWinds, NetFlow, Riverbed, Cisco Catalyst Center, Splunk, Wireshark, or comparable monitoring and diagnostic platforms preferred
Relevant certification such as CCNP Enterprise, CCIE, JNCIP, AWS Certified Advanced Networking Specialty, AWS Certified Solutions Architect Professional, AWS Certified Security Specialty, Security+ CE, or CISSP preferred

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life insurance
Comprehensive 401(k) plan with matching and immediate vesting
Career development
Positive culture centered on innovation and engagement
Limited telework may be available after onboarding and training, based on demonstrated proficiency and customer approval