Description

Key Responsibilities

IL5 Data Lake Architecture: Architect and operate multi-account AWS GovCloud data lakes using S3, Lake Formation, Glue Data Catalog, and Athena, optimizing partitioning and storage strategy for low-cost, high-throughput querying.

Engineering Simulation ETL: Build and tune high-throughput AWS Glue (PySpark/Python) pipelines engineered to handle large, complex Finite Element Analysis (FEA) simulation datasets (FEMAP, Simcenter Nastran).

Infrastructure & Compliance as Code: Write modular Terraform to provision hardened multi-account infrastructure, automate account baselines, and enforce NIST SP 800-171 and FIPS 140-2 controls via deployment code.

Air-Gapped CI/CD Automation: Build deployment pipelines for infrastructure and application code, managing Terraform state within restricted or air-gapped environment boundaries.

Data Security & Access Governance: Configure attribute/classification-based access controls, encryption at rest, and need-to-know policies aligned with DoD IL5 Controlled Unclassified Information (CUI) standards.

Data Quality & Pipeline Monitoring: Implement automated data validation, alerting, and error-handling routines across Glue ETL workflows to prevent pipeline failure and data corruption.

DoD Technical Alignment: Author comprehensive data flow diagrams, runbooks, and schema documentation while liaising directly with government technical leads and security accreditation managers (RMF/ATO).

Required Technical Skills & Qualifications

Clearance & Access: Active Secret clearance (U.S. Citizenship) and an Active Common Access Card (CAC) (Non-negotiable critical path requirement).

GovCloud IL5 Mastery: Proven hands-on experience designing and operating cloud infrastructure within AWS GovCloud (US) at DoD Impact Level 5.

AWS Data Lake & ETL Stack: Demonstrated depth in AWS Glue, Glue Data Catalog, PySpark, Python, Amazon S3, Lake Formation, and Athena.

Infrastructure as Code: Advanced Terraform module development, baseline deployment, and state management in restricted networks.

Data Architecture: Mastery over S3 bucket design, lifecycle rules, partitioning schemes, and cataloging for large-volume structured/unstructured datasets.

Regulatory & Compliance Knowledge: Practical command of RMF/ATO, NIST SP 800-171, FIPS 140-2, NISPOM (32 CFR Part 117), DFARS 204.4, and DD Form 254.

Preferred Qualifications

Experience supporting High Performance Computing (HPC) or finite element analysis (FEA) simulation workflows (FEMAP, Simcenter Nastran).

Additional AWS Analytics ecosystem depth: Redshift, EMR, Step Functions, Kinesis, Lambda.

DoD 8140 / 8570 Baseline Certification (e.g., CompTIA Security+ CE) or AWS Certifications (Data Engineer Associate, Solutions Architect Associate, Data Analytics Specialty).

Experience documenting Zone B artifacts for incremental authorization within an existing ATO boundary

Key Skills

Education

Bachelor's degree