Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 5 hours ago

AWS Infrastructure Engineer

ECS FEDERAL LLC258 open roles

Where
FAIRFAX, VA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAWS Infrastructure EngineerECS FEDERAL LLC · FAIRFAX, VA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ECS FEDERAL LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.4%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: first seen 5 hours ago

The posting

Everforth ECS is seeking an Infrastructure Engineer (AWS / Terraform / EKS) to work in a hybrid capacity in our Fairfax, VA office.

Everforth ECS is seeking a Senior Infrastructure Engineer (AWS / Terraform / EKS) to join a team responsible for managing and maintaining multiple network enclaves to support the DoD community. This role focuses on designing, building, and operating secure, repeatable AWS environments within a FedRAMP and ATO-governed context. The engineer will work in an environment where all deployments are infrastructure-as-code, peer-reviewed, and fully auditable. The successful candidate will combine hands-on AWS engineering depth with a strong sense of operational discipline, automation, and compliance awareness. This is not just EKS/Terraform build work; it is operational ownership across commercial and GovCloud AWS accounts for connectivity, routing, DNS, F5/load balancing, EKS, Terraform, security remediation, migrations, and stakeholder coordination.

We are seeking dynamic, energetic, and engaging team members who love challenges! The ideal candidate will be able to align to the following duties:

  • Troubleshoot and support enterprise load-balancing and ingress patterns, including F5 or equivalent technologies, DNS, TLS/certificate paths, routing, and endpoint reachability.
  • Coordinate directly with application teams, Security, stakeholders, network owners, and program leadership to resolve connectivity, access, migraiton, and production readiness
  • Design, build, and maintain Infrastructure-as-Code using Terraform (modules, S3/DynamoDB remote state, OPA/tfsec policy integration).
  • Provision, upgrade, and manage EKS clusters, including namespaces, Helm-based add-ons (cert-manager, ESO, Confluent Operator), and IAM roles for service accounts.
  • Design, configure, and troubleshoot AWS VPC networking, including routing, TGWs, DNS, DHCP, endpoints, NACLs, and security groups.
  • Implement and secure microservices on EKS with proper connectivity to AWS services (S3, ECR, Secrets Manager, IAM).
  • Automate infrastructure deployments using GitHub Actions (or self-hosted runners), cross-account IAM role assumptions, and CI/CD policy gates.
  • Collaborate with security and applications teams to enforce least-privilege IAM, automate compliance evidence collection, and support RMF/ATO documentation.
  • Diagnose and resolve complex issues spanning containers, Kubernetes networking, and AWS layers (VPC – Zscaler - C-TIPS - SaaS endpoints).
  • Support observability, logging, and monitoring through integration with Elastic, ScienceLogic, or AppDynamics to meet SLA and audit requirements.
  • Mentor and guide junior engineers through knowledge sharing, paired engineering, and process standardization.
  • Evaluate and improve infrastructure design for policy compliance, resiliency, and performance tuning.
  • Develop and maintain SOPs and playbooks that align with program governance.
  • Support legacy-to-CAWS migration activities, including RabbitMQ/app-server connectivity, environment cutover support, dependency discovery, and validation of network paths across lower and production environments.
  • Quickly build working knowledge of inherited environments, document tribal knowledge, create diagrams/runbooks, and transfer operational context to primary and backup owners.
  • Operate within a formal change-control, evidence, and audit expectations, including CR support, implementation evidence, rollback planning, and post-change validation.
  • Other duties, as assigned.

Note: Salary is commensurate with skillset, qualifications, experience, and educational background.

Salary Range: $140,000-180,000

General Description of Benefits

  • U.S. Citizen.
  • Active DoD Secret clearance.
  • Bachelor's degree or 6 years of relevant experience or high school diploma with 9+ years of relevant experience.
  • Candidate is required to work in a hybrid capacity, with up to 3 business days per week onsite at Everforth ECS Corporate Offices
  • Required certifications Active DoD 8140 IAT Level II Security+ (or higher). CLF-C02 AWS Certified Cloud Practitioner. SAA-C03 AWS Certified Solutions Architect – Associate.
  • Experience required: 6+ years designing, implementing, securing, and maintaining AWS Cloud infrastructure (CAWS, GovCloud, or equivalent). 5 + years troubleshooting hybrid/cloud network connectivity, including VPC routing, TGW, DNS, DHCP, TLS/certificates, security groups, NACLs, endpoints, and load balancers. 5+ years of of Terraform (advanced modules, state management, policy enforcement). 5+ years' of Kubernetes networking, ingress, CoreDNS, service exposure, node/security group behavior, and connectivity between EKS workloads and AWS/external services. 5+ years of infrastructure experience related to network security.
  • Strong networking foundation: TCP/IP, DNS, DHCP, TLS, routing, subnetting, NACLs, and endpoint connectivity.
  • Proficient scripting/automation using Python or Bash, YAML/JSON templating, and Git-based workflows.
  • Experience in security compliance environments (FedRAMP, FISMA, NIST 800-53) and supporting ATO documentation.
  • Demonstrated ability to collaborate cross-functionally with Security, DevSecOps, and CI/CD teams to maintain compliant, auditable infrastructure.
  • Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
  • Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ECS FEDERAL LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ECS FEDERAL LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ECS FEDERAL LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.