Job Description:

Tria Federal supports the Department of Labor, Bureau of Labor Statistics (DOL BLS). In this position you will be responsible for supporting cloud infrastructure development, cloud operations, and cloud environment administration across the BLS Cloud Landing Zone (CLZ) and Microsoft 365 tenant. You will perform all the duties of a Cloud Engineer 2 with increased technical proficiency and working knowledge. Additionally, you may lead and coach lower-level personnel to ensure proper cloud governance, automation, system security, cost efficiency, and operational reliability in accordance with BLS standards and procedures.

---

Basic Requirements:

Education & Eligibility

• Bachelor’s degree or 6 years of relevant cloud engineering experience
• Must be a U.S. Citizen or Green Card Holder who has resided in the U.S. for the past 3.5 years

Certifications (Preferred)

• AWS Solutions Architect Associate, AWS SysOps, Azure Administrator, Azure Solutions Architect, Security+, or similar cloud certifications

Required Technical Experience
Five (5) years of progressive experience covering cloud engineering responsibilities such as:

• Cloud infrastructure implementation, operations, and administration within AWS and/or Azure environments
• Managing multi-account cloud strategies, VPC/network topology, access management, and compliance guardrails
• Supporting enterprise cloud solutions using PowerShell, automation scripting, and platform administration
• Managing Microsoft 365 services including AD/Cloud Identities, Exchange, Teams, ADFS, and Intune

Three (3) years of hands-on experience with:

• Infrastructure as Code (IaC) tooling such as AWS CloudFormation, Terraform, or ARM templates
• DevOps and CI/CD integrations for automated deployments and cloud resource provisioning
• Implementing security, compliance, and cloud policy enforcement aligned to frameworks such as NIST 800-53 Rev 5

Two (2) years of experience in:

• Cloud cost analysis, cost anomaly reporting, and cost mitigation recommendations (FinOps practices)
• Power Platform administration including environment management, solution deployment, and security configuration
• Cloud change management and documentation requirements (LANCM or equivalent)

Additional Knowledge & Skills

• Understanding of IAM policies, identity security, encryption, ADFS integrations, ACLs, and regulatory compliance controls
• Ability to automate operational workflows using Python, Bash, PowerShell, or similar tools
• Experience maintaining security monitoring and auditing (CloudTrail, CloudWatch, Security Hub, etc.)
• Strong written communication including updating runbooks, SOPs, DR plans, and configuration documentation

---

Responsibilities:

• Maintain the health, security, and operational efficiency of the BLS Cloud Landing Zone (CLZ) and Microsoft cloud tenants
• Support transition of on-premise applications to cloud-based alternatives within the CLZ
• Perform automated infrastructure provisioning using IaC and remediate configuration drifts
• Manage AWS Organizations, Service Control Policies (SCPs), guardrails, and shared services infrastructure
• Integrate cloud environments with CI/CD pipelines for automated deployments
• Implement security best practices, including IAM hardening, logging, encryption, and network access controls
• Review and mitigate security, compliance, and configuration findings within required timelines
• Review cost anomaly alerts and consumption reports; recommend mitigation strategies
• Support cloud architecture request tickets and provide designs within required SLAs
• Manage tenant access, configuration, and administration across Microsoft 365 services
• Lead Power Platform implementation, testing, and integration planning activities
• Update system documentation, runbooks, SOPs, and disaster recovery materials within defined timelines
• Troubleshoot and resolve cloud infrastructure, security, deployment, and identity issues
• Enforce change control procedures using LANCM for all cloud system modifications except emergencies

 

ABILITY TO OBTAIN A DOL PUBLIC TRUST CLEARANCE (Must be a U.S. Citizen or Green Card Holder residing in the United States for more than 3.5 years  

Work Location: 100% ON-SITE SUPPORT in Suitland, MD