Apply on Employer Site

ECS · 3 months ago

Senior Infrastructure Engineer

Fairfax, VA, 22031, United States

Full-time

Onsite

Senior Level

ECS is seeking a Senior Infrastructure Engineer to work in their Fairfax, VA office. The role focuses on designing, building, and operating secure AWS environments within a FedRAMP and ATO-governed context, while ensuring compliance and operational discipline.

E-Commerce

No H1B

U.S. Citizen Only

Responsibilities

Design, build, and maintain Infrastructure-as-Code using Terraform (modules, S3/DynamoDB remote state, OPA/tfsec policy integration)

Provision, upgrade, and manage EKS clusters, including namespaces, Helm-based add-ons (cert-manager, ESO, Confluent Operator), and IAM roles for service accounts

Design, configure, and troubleshoot AWS VPC networking, including routing, TGWs, DNS, DHCP, endpoints, NACLs, and security groups

Implement and secure microservices on EKS with proper connectivity to AWS services (S3, ECR, Secrets Manager, IAM)

Automate infrastructure deployments using GitHub Actions (or self-hosted runners), cross-account IAM role assumptions, and CI/CD policy gates

Collaborate with security and applications teams to enforce least-privilege IAM, automate compliance evidence collection, and support RMF/ATO documentation

Diagnose and resolve complex issues spanning containers, Kubernetes networking, and AWS layers (VPC – Zscaler - C-TIPS - SaaS endpoints)

Support observability, logging, and monitoring through integration with Elastic, ScienceLogic, or AppDynamics to meet SLA and audit requirements

Mentor and guide junior engineers through knowledge sharing, paired engineering, and process standardization

Evaluate and improve infrastructure design for policy compliance, resiliency, and performance tuning

Develop and maintain SOPs and playbooks that align with program governance