System Engineer (Cloud) at By Light Professional IT Services LLC
Scott AFB, IL
—
Jul 21, 2026
Scott AFB, IL
Jul 24, 2026
What this job asks for AI summary
A senior cloud architect role supporting IT modernization for a U.S. military combatant command, focused on designing, migrating, and operating complex cloud environments — primarily AWS GovCloud, with some Azure involvement. Day-to-day work spans cloud architecture, network engineering (firewalls, BGP, VPNs), security compliance with DoD policy, and infrastructure automation. Suits a seasoned cloud/network engineer with a DoD background and active security clearance.
Senior level · 10+ years · St. Louis, MO-IL · Bachelor's required · Secret clearance
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
What the occupation pays Median $131,867 (middle half $103,906–$159,758).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The role is supporting USTRANSCOM at Scott AFB, IL (the USTRANSCOM headquarters), placing it in the St. Louis, MO-IL CBSA. The posting does not explicitly name the work location city, but USTRANSCOM/TCJ6 is at Scott AFB, IL.
The SOC classification is a genuine judgment call: the role blends cloud architecture/engineering (design, IaC, automation — pointing to 15-1252 Software Developers) with heavy network and infrastructure operations (firewall management, routing protocols, VPN, device administration — pointing to 15-1244). The primary framing is cloud architect/engineer with hands-on development and implementation, so 15-1252 is the primary pick, with 15-1244 as a close runner-up.
A DoD Secret clearance is a hard gate; TS/SCI is listed as preferred, not required.
The IAT Level III certification requirement lists several acceptable alternatives (CASP+ CE, CCNP Security, CISA, CISSP or Associate, GCED, GCIH) — these are captured as alternatives on the CISSP skill entry.
A Computing Environment (CE) certification for cloud/virtualization (Azure, AWS, Oracle, IBM) is required, with Azure preferred. This is captured in the Azure skill with alternatives, reflecting the CE cert requirement.
The preferred section explicitly calls out 15+ years of experience and a Master's degree; neither is a hard gate.
No compensation information is provided in the posting.
YAML is listed in the required section ('YML') and is captured implicitly within the Jenkins/Groovy/Git automation toolchain context; it was omitted as a standalone skill because it is a data format rather than a named technology platform, but its presence in the required list is noted here for the hiring manager's awareness.
Ignored 4 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): AWS Solutions Architect Professional, F5 BIG-IP LTM, F5 BIG-IP ASM, AWS Site-to-Site VPN.
Requires a Secret clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.