Senior Cloud Network Engineer

Everforth ECS is seeking a Senior Cloud Network Engineer to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax.

Please Note:

This position is contingent upon contract award.

The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP focuses on operational warfighting data and aims to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.

• The Senior Cloud Network Engineer is an experienced cloud networking professional responsible for designing, implementing, and sustaining the advanced network architectures that interconnect WDP Core Integration cloud environments across IL2/NIPRNet, IL5/AWS GovCloud, IL6/AWS Secret Region, and JWICS, ensuring secure, reliable, and high-performance connectivity for mission-critical DoW operations.

Working in close coordination with the Cloud Engineer SME, IaC engineers, cybersecurity personnel, and platform operations teams, this role delivers the routing integrity, cross-domain transport assurance, and network operational discipline required to sustain multi-enclave enterprise cloud infrastructure at the speed and scale the DoW's AI-First mission demands.

• Develops, architects, and administers advanced cloud network infrastructures supporting Department of War missions, multi-enclave operations, and cross-domain transport requirements.
• Designs and manages transit gateways, virtual private clouds, subnet architectures, boundary routing, Domain Name System structures, and network segmentation aligned with operational and security standards for classified and unclassified enclaves.
• Configures Internet Protocol Address Management systems, virtual private network connections, Gateway Load Balancers, and VPC Endpoints supporting distributed War Data Platform (WDP) Core Integration cloud operations.
• Conducts packet analysis, routing diagnostics, latency assessments, and Domain Name System trace evaluations using tools such as CloudWatch, CloudTrail, VPC Flow Logs, and advanced network analyzers.
• Produces enterprise network architecture diagrams, routing tables, capacity forecasts, and configuration baselines supporting system operations documentation.
• Leads incident investigations for network degradations and coordinates resolution actions with cloud engineers, cybersecurity personnel, and mission operators.
• Implements secure routing methodologies, encryption standards, and traffic filtering aligned with operational requirements.
• Develops operational procedures supporting system availability, network hardening, and cross-domain data movement.
• Provides technical leadership by guiding junior engineers through complex routing scenarios, diagnostic workflows, and network optimization strategies.
• Contributes to operational readiness by maintaining comprehensive network configuration records, performance dashboards, and audit-traceable artifacts.
• Delivers measurable mission outcomes through reduced latency, improved routing efficiency, and sustained network integrity across multi-region environments supporting Department of War stakeholders.
• Performs other duties as assigned.
• Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI).
• 10-12 years of progressively responsible experience in cloud network engineering, enterprise network architecture, or a closely related field, with demonstrated proficiency designing, deploying, and sustaining secure network infrastructures in support of DoW or federal government programs operating across multiple security enclaves.
• Expert hands-on proficiency with AWS cloud networking services including Transit Gateway, VPC architecture, subnet design, IAM-integrated boundary controls, VPC Flow Logs, CloudWatch, and CloudTrail, combined with demonstrated experience managing these capabilities across IL5/AWS GovCloud, IL6/AWS Secret Region, and JWICS environments.
• Demonstrated experience configuring and administering IPAM systems, VPN connections, Gateway Load Balancers, VPC Endpoints, and DNS architectures in multi-enclave DoW-compliant environments, including cross-domain transport and boundary protection implementations aligned with applicable security requirements.
• Proven ability to perform advanced network diagnostics including packet analysis, routing trace evaluation, latency profiling, and DNS troubleshooting, and to lead incident resolution activities with cloud engineers, cybersecurity personnel, and platform operations teams across classified and unclassified environments.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).