Job Description

Cloud Infrastructure Engineer – AWS (Classified Environments / Landing Zone)

Location: Chantilly, VA
Work Type: Onsite / Hybrid
Citizenship: U.S. Citizenship required
Clearance: Active Top Secret/SCI clearance required

The Opportunity

Strategic Business Systems (SBS) is expanding our AWS Professional Services team to support a high-priority, mission-critical national security program We are actively building out secure cloud environments in AWS classified regions and are looking for engineers to help design and stand up the foundational infrastructure.

This role is focused on building and scaling AWS Landing Zones in highly secure environments. You’ll be working directly with AWS teams and mission stakeholders to establish the core cloud architecture that future applications and capabilities will depend on.

This is a high-impact opportunity for someone who enjoys building from the ground up and understands what it takes to operate in secure, compliance-driven environments.

What You’ll Be Doing

• Design and implement AWS Landing Zones in classified (air-gapped) environments
• Build out core cloud infrastructure including account structure, networking, IAM, and guardrails
• Establish secure, scalable multi-account architectures aligned to mission requirements
• Implement infrastructure as code using Terraform and/or AWS-native tools
• Configure and manage VPCs, subnets, routing, DNS, and connectivity patterns
• Deploy and enforce security controls, logging, and monitoring frameworks
• Support integration with enterprise identity, access control, and compliance requirements
• Partner with AWS and customer teams to ensure alignment with best practices

What We’re Looking For

AWS Infrastructure & Architecture

• Hands-on experience building AWS environments from the ground up
• Strong understanding of Landing Zone concepts (Control Tower or custom implementations)
• Experience designing multi-account AWS architectures

Networking

• Deep understanding of AWS networking (VPCs, routing, NAT, Transit Gateway, PrivateLink, etc.)
• Experience designing secure connectivity patterns in restricted environments

Automation / IaC

• Experience with Terraform, CloudFormation, or similar IaC tools
• Ability to automate infrastructure deployment and configuration

Security & Compliance

• Experience implementing secure cloud environments (IAM, ABAC, logging, guardrails)
• Familiarity with operating in classified or highly regulated environments

Nice to Have

• Experience working in AWS GovCloud or classified regions
• Familiarity with DISA STIGs, NIST, or DoD cloud requirements
• Experience supporting ATO or compliance-driven environments

Why SBS

SBS is a trusted AWS partner supporting mission-critical programs across the federal space. Our teams focus on real delivery—building secure, scalable environments that enable critical operations.

You’ll be part of a team that:

• Is building foundational cloud environments from day one
• Works directly with AWS on high-visibility programs
• Plays a key role in national security missions

About SBS

Strategic Business Systems, Inc. is a national IT services provider headquartered in the Washington, DC area. We specialize in infrastructure, cloud, cybersecurity, and mission-critical systems.
EEO Disclaimer

SBS is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to age, gender, gender identification, sex, sexual orientation, color, race, creed, national origin, religion, marital status, parental status, citizenship status, ancestry, physical or mental disability, genetic information, veteran status, military status, or any other classification protected by federal, state, or local laws.

Accommodations

If you need an accommodation seeking employment with SBS, please email hr@sbsplanet.com . Accommodations are made on a case-by-case basis.

Apply

Send resumes to recruiting@sbsplanet.com