Cloud Network Engineer (AWS) - TS/SCI - On-Site SCIF with Security Clearance

IMPORTANT: This position is 100% ON-SITE inside a SCIF. This is NOT remote work and NOT hybrid. On-site work is required and is not optional. This role is CUSTOMER-FACING, working directly with government and partner stakeholders, including at customer facilities as needed.

Employer: D9Tech Resources, LLC
Openings: 1 opening
Location: Herndon, VA (primary) or Washington, DC (preferred).

Alternates: Seattle, WA or Denver, CO. Must live within commuting distance of one of these SCIF locations.
Employment type: W-2 Contract, Full Time
Hours: 40 hours per week (full time)
Period of performance: December 2026 through November 2027
Clearance: Active TS/SCI required
Pay: Competitive Summary
D9Tech Resources, LLC is hiring in support of a national security cloud program. Design and run network architecture for classified AWS environments, including cross-region and external connectivity, across mission projects. All work is performed on-site in a SCIF. Responsibilities

• Design VPCs, VPC endpoints and routing, including for Amazon WorkSpaces
• Manage IP allow-listing and cross-region connectivity between GovCloud and classified regions
• Build and support external and partner network connections
• Design with Transit Gateway, segmentation, Direct Connect and VPN
• Configure Route 53 Resolver, security groups, NACLs and AWS Network Firewall to meet ATO
• Coordinate with boundary and cross-domain teams Required Qualifications
• Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required
• Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
• Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
• 5+ years in network engineering, including 3+ years in AWS networking
• Experience with classified network boundaries and cross-domain connectivity
• Hands-on experience with AWS cloud services
• Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
• DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable

Preferred Qualifications

• Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
• AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
• AWS Advanced Networking Specialty or CCNP Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered. D9Tech Resources, LLC is an

Equal Opportunity Employer.