Cloud Engineer Tech Lead

Title: Cloud Engineer Tech Lead

State Role Title:Info Technology Specialist III

Hiring Range: Up to $165000

Pay Band: 6

Agency: Dept Behavioral Health/Develop

Location:Central Office

Agency Website:

Recruitment Type: General Public - G

Job Duties

The Department of Behavioral Health and Developmental Services (DBHDS) is seeking an IT professional to provide technical and operational leadership for the design implementation and management of DBHDS infrastructure and cloud systems in alignment with agency IT strategy governance and modernization goals; ensure secure reliable and scalable operations across hybrid environments supporting all business units; and drive the agencys technology transformation cloud adoption and system optimization efforts while maintaining compliance with COV/VITA standards and best practices. This position will partner with business units to ensure that enterprise systems are secure efficient and aligned to agency goals; develop operational frameworks implement automation and strengthen monitoring incident response and performance management; and serve as a bridge between infrastructure engineering security and application support teams to ensure operational continuity compliance and service reliability across hybrid and multi-cloud environments.

Minimum Qualifications

Hands-on experience managing AWS environments at the enterprise level including EC2 VPC IAM S3 RDS Lambda CloudWatch and CloudTrail.
Demonstrated ability to design deploy and operate hybrid infrastructure solutions with workloads running in both on-premises environments and AWS.
Experience implementing automation in AWS using services such as Lambda Systems Manager CloudWatch Events EventBridge and Step Functions.
Experience creating and maintaining infrastructure as code templates using AWS CloudFormation or Terraform with documented use in production environments.
Demonstrated ability to implement CI and CD processes for infrastructure and application deployment using AWS CodePipeline CodeBuild or equivalent tooling.
Experience configuring and managing AWS networking services including VPC design subnetting routing security groups network ACLs load balancers private connectivity and hybrid networking with VPN or Direct Connect.
Experience managing identity and access in AWS including IAM policies roles permission boundaries access reviews and integration with identity providers.
Experience implementing AWS security controls including encryption key management Secrets Manager Certificate Manager and monitoring through GuardDuty Inspector or CloudTrail Lake.
Demonstrated ability to implement enterprise monitoring and observability in AWS using CloudWatch metrics and logs log insights alarms dashboards and integration with SIEM or APM tools.
Hands-on experience managing AWS storage and backup services including S3 storage classes lifecycle policies EBS snapshots AMIs and backup and restore processes.
Demonstrated ability to support disaster recovery strategies in AWS including multiAvailability Zone designs replication automated failover and recovery runbooks.
Experience migrating on-premises applications or infrastructure to AWS including assessment planning data transfer cutover coordination and post migration optimization.
Demonstrated knowledge of AWS cost management including cost allocation tags budgeting reserved instance or savings plan strategy and workload right sizing.
Experience responding to system incidents within AWS including log analysis rollback procedures restoration from backup and root cause determination.
Demonstrated ability to work effectively with cloud engineers system administrators architects and information security teams to ensure aligned design and operation.
Experience preparing operational documentation architecture diagrams runbooks and audit evidence for AWS environments in alignment with VITA and SEC five hundred thirty policies.
Ability to mentor and grow team capability in AWS services cloud operations and automation through training and skill development plans.

Additional Considerations

Experience designing or operating AWS environments that follow AWS Well Architected Framework guidance and support multi account governance through AWS Organizations Control Tower or similar structures.
Demonstrated ability to implement advanced AWS architectures including serverless solutions using Lambda API Gateway DynamoDB SQS and Step Functions or container-based solutions using ECS Fargate or EKS.
Experience integrating enterprise identity systems with AWS IAM Identity Center or external providers along with hands-on experience implementing security controls such as GuardDuty Inspector Secrets Manager and KMS.
Experience with enterprise monitoring and observability using CloudWatch CloudTrail and log insights along with optional tools such as Datadog Grafana or Prometheus.
Experience designing or maintaining disaster recovery strategies using native AWS capabilities including multiAvailability Zone architectures S3 replication Route fifty-three failover and automated recovery workflows.
Demonstrated experience modernizing legacy applications or on-premises workloads using AWS managed services data platforms such as RDS or Aurora and automation frameworks that support cloud native transformation.
Possession of AWS professional or specialty certifications in architecture DevOps security networking or data.

Special Instructions

You will be provided a confirmation of receipt when your application and/or résumé is submitted successfully. Please refer to Your Application in your account to check the status of your application for this position.

This position is eligible however not guaranteed for telework opportunities; availability hours and duration of telework shall be approved as outlined in the Commonwealth telework policy.

For consideration interested applicants must apply by completing the online application and/or submit a resume. However emailed faxed and hand-delivered applications and/or resumes will not be accepted. Applications must be submitted by 11:55 p.m. on the listed closing date. Reasonable accommodations are available to persons with disabilities during application and/or interview processes per the Americans with Disabilities Act.

DBHDS welcomes all applicants authorized to work in the U.S. For more information on how to seek this authorization please refer to Working in the United States or contact the U.S. Citizenship and Immigration Services office directly.

For any technical assistance with the website please contact

Contact Information

Name: ShaKiera Miles

Phone: N/A

Email: - Inquiries Only/No Submissions to include resumes.

In support of the Commonwealths commitment to inclusion we are encouraging individuals with disabilities to apply through the Commonwealth Alternative Hiring Process. To be considered for this opportunity applicants will need to provide their AHP Letter (formerly COD) provided by the Department for Aging & Rehabilitative Services (DARS) or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans are encouraged to answer Veteran status questions and submit their disability documentation if applicable to DARS/DBVI to get their AHP Letter. Requesting an AHP Letter can be found at AHP Letter or by calling DARS at .

Note: Applicants who received a Certificate of Disability from DARS or DBVI dated between April 1 2022- February 29 2024 can still use that COD as applicable documentation for the Alternative Hiring Process.