CNO Cloud Engineer

MANTECH is looking for a highly motivated and qualified CNO Cloud Engineer to join our team in a remote based position.  This rewarding and challenging position supports the Department of War (DoW) to produce a wide range of capabilities to improve cyberspace operations and defend U.S. vital national security interests.  

Responsibilities include, but are not limited to: 

• Provide CNO Cloud-based Solutions: Implement AWS services to provide a CNO command and control (C2) hub for provisioning warfighters' cyber hardware and software resources. 

• Drive CNO Cloud Security & Compliance Automation: Build, maintain, and automate recurring STIG/CIS/NSA compliance scan pipelines, OpenSCAP/Kubescape security scanning workflows, and Security Hub findings normalization across multi-environment CNO AWS infrastructure (Dev/Stage/Prod). 

• Manage Infrastructure as Code (IaC) & Golden Image Pipelines: Develop and maintain Terraform templates, Golden AMI/Image Builder pipelines, AWS KMS key configurations, network/firewall integration, and Kubernetes (EKS/Big Bang) deployment scaling. 

• Integrate Software: Implement Application Programming Interface (API) workflows and develop APIs for secure intercommunication of technologies 

• Technical Onboarding, Architecture & Cross-Team Coordination: Author comprehensive system architecture diagrams and Confluence technical documentation; serve as the technical liaison between Information Assurance (IA), security stakeholders, and internal DevOps engineers. 

Required Qualifications: 

• Education and Experience: Bachelor’s degree in related field with 4yrs of relevant (or High School Diploma with 8 years of relevant experience) 

• Core AWS & Infrastructure as Code (IaC) Expertise: 5+ years of hands-on experience with AWS cloud services (EC2, S3, Security Hub, KMS, networking/firewalls), Terraform, and cost optimization across multi-account/multi-environment architectures. 

• DevSecOps, STIG & Security Compliance Automation: Demonstrated experience implementing automated security
• compliance (DISA STIGs, CIS Benchmarks, NSA frameworks) using tools like OpenSCAP, Kubescape, or AWS Security Hub within DoD/federal environments. 

• Kubernetes, CI/CD & Systems Architecture: Proficiency with Kubernetes cluster management, container image pipelines (AMI Builder/GitLab CI), peer code reviews (MRs), and writing high-level architectural decision records (ADRs) and system documentation.
• Ability to travel to San Antonio, TX area up to 25% for meetings, as need 

Desired Qualifications:  

• AWS certification 

• Kubernetes certification 

• Familiarity with Gov Cloud environments 

• Familiarity with SIEM and SOAR technologies  

• Familiarity with DoD Enterprise DevSecOps Reference Design 

• Familiarity with CNO infrastructure support to CNO operations 

Security clearance requirement: 

• US citizenship required
• Must be able to obtain and maintain TS/SCI clearance 

Physical requirements: 

• Must be able to be in a stationary position more than 50% of the time 

• Must be able to communicate, converse, and exchange information with peers and senior personnel 

• Constantly operates a computer and other office productivity machinery, such as a computer