AWS Infrastructure Engineer – RHEL 7 to RHEL 8

Job description

AWS Infrastructure Engineer (Architect-Level) — RHEL 7 to RHEL 8 Migration Overview The AWS Infrastructure Engineer supports the Operations workstream of a large federal client's technology operations, maintenance, and enhancement program, providing infrastructure architecture and automation for a RHEL 7 to RHEL 8 server migration. This is an architect-level role: the engineer designs the AWS infrastructure-as-code approach and CI/CD automation that the delivery team executes, rather than performing day-to-day, hands-on-keyboard configuration. Working alongside the Solutioning Architect, DevOps Engineers, and Systems Engineers, this person architects the AWS account structure, instance provisioning, and network connectivity needed to stand up RHEL 8 servers across multiple non-production and production environments, and defines the Infrastructure-as-Code (Terraform, AWS CloudFormation) templates and standards used to build and repeat that migration across each environment tier. The role also owns the architecture for automating the CI/CD pipeline that builds, tests, and promotes infrastructure and application changes up through Production. Success in this role requires deep, architecture-level expertise in AWS infrastructure and Infrastructure-as-Code (Terraform and/or CloudFormation), strong familiarity with DevSecOps and Agile delivery practices, and the ability to translate migration requirements into a solution design that aligns with the client's governance and security standards. Key Functions Architect the AWS Infrastructure-as-Code approach (Terraform, CloudFormation) used to stand up and configure RHEL 8 servers across multiple non-production and production environments. Design AWS account structure, EC2 instance provisioning, VPC configuration, and network connectivity needed to support the RHEL 7 to RHEL 8 migration. Account for the system's 30+ internal and external partner integrations when designing secure interface patterns for a FedRAMP-authorized (GovCloud) environment, ensuring those patterns are repeatable across the full range of non-production and production environment tiers. Own the architecture for automating the CI/CD pipeline (e.g., Jenkins, GitHub) that builds, tests, and deploys infrastructure and application changes up through Production. Define reusable Terraform and CloudFormation templates and IaC standards to ensure consistency and repeatability as the migration approach is repeated across each environment tier. Help define the environment tier build-out sequence and validation strategy — determining which environment tier is stood up and migrated first and how it is validated before promoting the migration to the next tier. Provide technical direction and design review to DevOps Engineers and Systems Engineers executing infrastructure automation and RHEL 8 server configuration. Support the architecture for standing up and configuring RDS instances as part of the environment migration, in coordination with the Database Administrator. Support planning for Jenkins job migration and DNS cutover (F5) activities at an architecture and design level. Incorporate vulnerability and cloud security posture scanning (e.g., Nessus, Turbot) into the infrastructure architecture. Participate in and help lead technical discovery and design sessions with application, infrastructure, security, and cloud engineering stakeholders. Ensure infrastructure designs comply with the client's technical reference model, ATO/POA&M requirements, and DevSecOps best practices. Help evaluate which existing POA&Ms are addressed or closed as a result of the RHEL 7 to RHEL 8 migration. Support performance testing, monitoring, and remediation activities by providing infrastructure-level analysis and recommendations. Document architecture decisions, infrastructure designs, and runbooks in Confluence and Jira. Coordinate with the Solutioning Architect and Operations Manager to ensure infrastructure delivery aligns with the overall migration timeline. Maintain positive working relationships with the federal client, delivery teams, and technical stakeholders while supporting mission-critical systems. Minimum Qualifications Bachelor’s degree and 5 years of relevant experience. An additional 2 years of experience (7 years total) with an Associate’s Degree in lieu of a Bachelor’s Degree. An additional 4 years of experience (9 years total) with a High School Diploma in lieu of a Bachelor’s Degree. Demonstrated experience architecting AWS infrastructure using Infrastructure-as-Code, with hands-on expertise in Terraform and AWS CloudFormation. Experience designing and automating CI/CD pipelines that deploy changes up through Production (e.g., Jenkins, GitHub/GitHub Actions). Experience architecting AWS account structures, VPCs, instance provisioning, and network connectivity. Experience designing secure integration and interface patterns within a FedRAMP-authorized (GovCloud) environment. Experience with Red Hat Enterprise Linux (RHEL) server infrastructure, including OS version migrations. Experience incorporating vulnerability and cloud security posture management scanning (e.g., Nessus, Turbot) into infrastructure architecture and design. Experience supporting DevSecOps practices and Agile delivery. Ability to translate infrastructure and migration requirements into architecture-level solution designs and documentation. Strong analytical and technical leadership skills — this is an architecture- and design-focused role that provides technical direction rather than day-to-day, hands-on configuration. Excellent verbal and written communication skills, with the ability to lead technical discussions across cross-functional and federal stakeholder teams. Strong attention to detail and organizational skills. Preferred Qualifications or Skills Experience supporting federal government systems. Experience with AWS RDS / PostgreSQL infrastructure. Experience automating certificate renewal and installation using Venafi. Familiarity with federal agency technical reference models and ATO/POA&M processes. AWS certification (e.g., AWS Certified Solutions Architect – Professional). Experience using Jira and Confluence, including version-controlled documentation practices. Experience supporting large-scale server or operating system migration projects. Familiarity with F5 and DNS cutover activities. Position Details Employment type: Full-Time, W2 Location: 100% Remote (US-based) Hours: 40 hours/week with availability during core business hours of 8am–5pm ET Start date: On or around October 1, 2026 Eligibility: Must be eligible to obtain a Public Trust clearance