Cloud Administrator

📋 Job Overview

Application\nAbout Knox

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.

Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.

🏢 About Knox

Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.

Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.

🎯 The Role

Knox is seeking a Cloud Administrator which secures, builds, and operates multi-cloud infrastructure across AWS, Microsoft Azure, and Google Cloud Platform, including their government regions (AWS GovCloud (US), Azure Government, and Google Cloud Assured Workloads). The role manages identity and access, designs segmented and encrypted networks, and keeps systems hardened to DISA STIGs and CIS Benchmarks within FedRAMP, NIST SP 800-53 and SP 800-171, CMMC, and DoD Impact Level requirements up to IL5. Using scripting and Infrastructure as Code, the Cloud Administrator makes environments repeatable and changes reviewable, feeds cloud logs to the SIEM, and supports incident response. As the final escalation point for the help desk, this person troubleshoots complex cross-platform problems and maintains audit-ready documentation that supports continuous monitoring and POA&M evidence.

In addition to the cloud environment, this role supports Knox's on-premises employee infrastructure across multiple office sites, including employee workstations, local networks, printers, and conference room equipment. The administrator manages the office collaboration software that employees use every day, including email, calendars, file sharing, chat, and video meetings, and handles account setup, licensing, security settings, and user support. They keep workstations patched, hardened, and enrolled in endpoint management and protection tools at every site, and they resolve problems that reach them from the help desk.

✅ Key Responsibilities

• Manages identity and access in AWS (Amazon Web Services) IAM (Identity and Access Management), Microsoft Entra ID for Azure, and GCP (Google Cloud Platform) IAM: single sign-on, multi-factor authentication, least privilege, privileged account control, and regular access reviews.
• Designs secure networks and manages encryption: segmentation with AWS and GCP Virtual Private Clouds and Azure Virtual Networks, private connections such as AWS Direct Connect and Azure ExpressRoute, boundary controls, and encryption keys in AWS KMS (Key Management Service), Azure Key Vault, and Google Cloud KMS using FIPS (Federal Information Processing Standards) 140 validated modules.
• Keeps systems at a known secure baseline: hardens to DISA STIGs (Defense Information Systems Agency Security Technical Implementation Guides) and CIS (Center for Internet Security) Benchmarks, catches drift with AWS Config, Azure Policy, and GCP Security Command Center, and patches by risk with evidence of what was fixed and what was accepted as an exception.
• Operates within FedRAMP (Federal Risk and Authorization Management Program), NIST (National Institute of Standards and Technology) SP 800-53 and SP 800-171, CMMC (Cybersecurity Maturity Model Certification), and the DoD (Department of Defense) Cloud Computing Security Requirements Guide Impact Levels, including IL5.
• Builds and runs infrastructure across all three providers, including the government regions: AWS GovCloud (US), Azure Government, and Google Cloud Assured Workloads.
• Automates with scripting (PowerShell, Bash, Python) and Infrastructure as Code tools such as Terraform, AWS CloudFormation, and Azure Bicep, so environments are repeatable and changes are reviewed.
• Sends logs from AWS CloudTrail, Azure Monitor, and GCP Cloud Logging to the SIEM (Security Information and Event Management) system, and supports security during incident response.
• Troubleshoots hard problems that cross systems and providers, works methodically under pressure, and serves as the final escalation point for the help desk.
• Keeps documentation that holds up in audits: System Security Plans, runbooks, diagrams, and change records that serve as continuous monitoring and POA&M (Plan of Action and Milestones) evidence.
• Supports Knox’s on premises employee infrastructure across multiple office sites, including employee workstations, local networks, printers, and conference room equipment.
• Manages the office collaboration software employees use every day, including email, calendars, file sharing, chat, and video meetings and handles account set-up, licensing, security settings, and user support.
• Keeps workstations at every site patched, hardened, and enrolled in endpoint management and protection tools.
• Resolves on-premises and collaboration issues escalated from the help desk. Troubleshoots hard problems that cross systems, providers and office sites. Works methodically under pressure, and serves as the final escalation point for the help desk.

📌 Required Qualifications

• 5+ years of hands-on experience administering cloud infrastructure, with production experience in at least two of AWS, Azure, and GCP and working knowledge of the third.
• Experience operating in government cloud environments such as AWS GovCloud (US), Azure Government, or Google Cloud Assured Workloads.
• Demonstrated expertise in cloud identity and access management.

⭐ Desirable Experience

🎁 Benefits

🛂 Visa & Eligibility