Cloud Platform Engineer

Job summary

Description This role is contingent upon a contract award. ICF*** is seeking a Cloud Platform Engineer to deploy, configure, and maintain cloud infrastructure for a federal technology program. Reporting to the Cloud / Enterprise Architecture Lead, this role is responsible for building and operating the multi-cloud landing zone environment using infrastructure-as-code and DevSecOps practices.

Benefits

Qualifications

• in the Washington, DC Metro area.
• This position requires that the job be performed in the United States.
• If you accept this position, you should note that ICF*** does monitor employee work locations and blocks access from foreign locations/foreign IP addresses and also prohibits personal VPN connections.
• What You'll Be Doing
• Deploy and manage cloud landing zone architectures across Azure, AWS, and Google Cloud Platform using repeatable, automated provisioning with identity-first controls, guardrails, network security, and policy enforcement.
• Implement infrastructure and policy as code using IaC templates, GitHub Actions, and CI/CD pipelines so environments can be created, updated, and audited consistently and without manual intervention.
• Build and maintain system integrations using APIs, SDKs, webhooks, and event streams, with proper secrets management, least-privilege scoping, error handling, and logging.
• Deploy and manage Azure Virtual Desktop for remote access scenarios and specific user personas.
• Manage DNS-as-code for all agency platforms and services, including certificates and related configurations.
• Integrate platform logs, alerts, and risk signals into central monitoring
• using compliance-as-code tooling where available.
• Coordinate with identity, device, and cybersecurity teams to ensure cloud access policies, device compliance rules, and conditional access work together as part of a consistent Zero Trust model.

Responsibilities

• Reporting to the Cloud / Enterprise Architecture Lead, this role is responsible for building and operating the multi-cloud landing zone environment using infrastructure-as-code and DevSecOps practices.

Certifications

Degrees

Industry

Company size

Security clearance