below marketmost similar roles pay hereabove market
This role pays less than
70%
of similar roles. Most pay
$142,400–$206,450
— the blue band above.
At the midpoint, this role pays about
$142k
versus about
$174k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1662 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 904 roles with salary data.
JOB TITLE: Cloud Engineer
As a Cloud Engineer, you will join a team of experienced professionals to help transform managed platforms and modernize IT infrastructure for various missions. You will collaborate with cloud architects and engineers specializing in Amazon Commercial, GovCloud, and Azure to build, evolve, maintain, and secure cloud solution components. Your daily responsibilities include working within a DevOps framework to create and manage container apps using Kubernetes and Helm. You will utilize AWS CDK, Terraform, or CloudFormation to write infrastructure as code, while managing F5 BIG-IP and Splunk. Technical skills include proficiency in TypeScript, Python, PowerShell, or Bash for automating operations. You will solve complex problems by migrating legacy platforms and creating new ones from scratch while ensuring secure, scalable cloud architecture.
What does a Cloud Engineer earn?
Median $152167 from 44 postings across 12 companies.
Build, evolve, maintain, and secure cloud solution components across Amazon Commercial, GovCloud, and Azure platforms.
Create and manage container applications using Kubernetes and Helm within a DevOps framework.
Write infrastructure as code using AWS CDK, Terraform, or CloudFormation via CI/CD pipelines.
Deploy and administer F5 BIG-IP, including LTM and Advanced WAF, in cloud or hybrid environments.
Administer Splunk environments, including universal forwarders, index management, and role-based access.
Automate infrastructure operations such as patching, image builds, and account provisioning using Python, TypeScript, or Bash.
Review and validate AI-generated infrastructure code before deployment to production environments.
Modernize legacy computing platforms and applications or build new cloud-native solutions from scratch.
What we're looking for
5+ years of experience engineering and operating cloud infrastructure in AWS, including multi-account networking with VPCs, Transit Gateway, and centralized egress and inspection.
3+ years of experience writing infrastructure as code with AWS CDK, Terraform, or CloudFormation and delivering it through pull request–based CI/CD pipelines with automated tests.
2+ years of experience deploying and administering F5 BIG-IP, including LTM or Advanced WAF, in a cloud or hybrid environment.
2+ years of experience deploying and administering Splunk, including universal forwarders, HTTP Event Collector ingestion, index management, and role-based access.
Experience automating infrastructure operations using TypeScript, Python, PowerShell, or Bash.
Experience using AI coding assistants or agents in daily engineering work and reviewing and validating AI-generated infrastructure code.
Knowledge of Kubernetes, including Amazon EKS, Helm, and GitOps deployment with Argo CD.
Ability to obtain a Secret clearance.
Bachelor’s degree in Computer Science or Information Systems.
DoD 8140 IAT Level II Certification such as Security+ CE Certification.
Experience supporting DoD Impact Level 5, FedRAMP High, or other accredited environments in AWS GovCloud (preferred).
Experience migrating workloads or tenants between AWS environments or accounts with minimal downtime (preferred).
Experience with AWS security and vulnerability tooling, including Security Hub, GuardDuty, Inspector, AWS Network Firewall, Tenable or ACAS, and Trellix (preferred).
Experience with identity and end-user access services, including IAM Identity Center, Keycloak, and Amazon AppStream 2.0 or WorkSpaces (preferred).
Experience building agentic engineering workflows, including custom agent skills, automated pull request review, or agent-drafted documentation (preferred).
Knowledge of CMMC Level 2, NIST SP 800-171, or NIST SP 800-53 controls and how infrastructure configuration produces audit evidence (preferred).
Knowledge of software supply chain controls, including Cosign image signing, Kyverno admission policy, and JFrog Artifactory (preferred).