Senior Cloud Engineer

Direct Connect out of a federal data center, and the routing that makes it behave.

Sienna Systems is seeking a Senior Cloud Engineer to join our U.S. Customs and Border Protection Enterprise Network Architecture & Engineering Services Support (ENAESS) team, in Ashburn, Virginia.

This role sits at the seam between a large, mature on-premises network and AWS. The work is the connectivity itself — Direct Connect, routing at the internet connection point, and the security architecture between the two sides — alongside Trusted Internet Connections 3.0 migration. If you have spent your career either purely on-prem or purely in the console, this is the role that uses both.

Why You'll Want This Role

• $122,500 – $127,500 based on experience
• $10,000 signing bonus for candidates with an active CBP background investigation, payable after 60 days
• AWS Direct Connect and federal-scale hybrid routing, not a greenfield lift-and-shift
• TIC 3.0 migration work with real architectural latitude
• Established DHS program with a long runway and a stable government customer
• 401(k) with 4% matching, immediate vesting, no restrictions
• 3 weeks Paid Time Off plus 11 Federal Holidays
• Hybrid out of Ashburn, Virginia — no relocation needed if you are already in the DC metro

Key Responsibilities

• Lead cloud networking engineering and implementation across the enterprise.
• Design, implement, and operate AWS Direct Connect connectivity between government data centers and AWS.
• Engineer routing and security architecture at the internet connection point.
• Support TIC 3.0 migration planning and execution.
• Integrate cloud networking with the existing Cisco ACI fabric and F5 load balancing infrastructure.
• Support colocation implementation and management, including cloud-adjacent connectivity.
• Design, engineer, and implement Software Defined Networking solutions extending to cloud instances.
• Develop and maintain design documentation, and route it through peer review and security approval before implementation.
• Leverage current technologies and best practices to keep the environment secure, resilient, and cost-efficient.

Required Qualifications

• US citizenship, and the ability to pass a five-year CBP background investigation (SF-85P, Public Trust). Work cannot begin until the investigation is adjudicated.
• Minimum 5 years of relevant cloud engineering experience
• Demonstrated AWS experience, including AWS Direct Connect
• Working knowledge of enterprise network infrastructure — routing, switching, load balancing, firewalls
• Ability to design hybrid connectivity between on-premises data centers and cloud environments
• Ability to produce design documentation to a standard that survives peer and security review

Preferred Qualifications

• Experience or knowledge of routing at an Internet Connection Point (ICP)
• A favorable CBP background investigation or DHS High Risk background investigation within the past 4 years
• Direct TIC 3.0 migration experience
• AWS certification — Solutions Architect, Advanced Networking, or SysOps
• Cisco networking certification (CCNA or CCNP)
• Federal cloud compliance experience including FedRAMP, NIST 800-53, or FISMA
• Data center move or migration experience
• Prior federal or DHS/CBP program experience

Salary: $122,500 – $127,500 based on experience

Job location: Ashburn, Virginia (hybrid)

Company Benefits

• Medical/dental/vision insurance
• 401(k) plan: 4% matching, immediate vesting, no restrictions
• 3 weeks Paid Time Off (PTO)
• 11 Federal Holidays
• Long- and short-term Disability coverage
• Company-sponsored Life Insurance coverage
• $10,000 signing bonus for candidates with an active CBP BI (payable after 90 days)
• Hiring Referral Bonus