DevSecOps Cloud Automation Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, enhance, and standardize GitLab CI/CD pipelines, including reusable jobs, parent/child pipelines, runners, triggers, and integrated security testing.

• Build and sustain AWS GovCloud infrastructure utilizing Terraform and other automation tools.

• Develop and manage Ansible Playbooks for installation, patching, hardening, configuration, and operational support on both Windows and Linux systems.

• Provide support for AWS services and containerized workloads, including EC2, RDS, ECR/EKS, Systems Manager, Secrets Manager, and approved/hardened container images like Iron Bank.

• Automate security controls, vulnerability remediation, and validation using Department of Defense (DoD) security tools such as ACAS, Elastic Agent, CloudWatch agents, and related functionalities.

• Diagnose and independently resolve intricate infrastructure, pipeline, operating system, networking, container, and security challenges.

• Recognize opportunities to streamline, standardize, and enhance DevSecOps and cloud capabilities while minimizing technical debt and eliminating redundant solutions.

• Collaborate with application, cloud, cybersecurity, and architecture teams to craft and execute solutions that adapt to evolving ATIS priorities.

• Produce and maintain runbooks, architecture diagrams, technical documentation, and reusable patterns that foster team self-sufficiency and facilitate knowledge transfer.

• Offer technical direction and mentorship while remaining actively involved in hands-on engineering and implementation.

⛳️ Requirements

• Bachelor’s degree in computer science, information technology, engineering, or a related technical discipline, or equivalent relevant experience.

• Over 7 years of practical experience in DevSecOps, cloud, platform, systems, or infrastructure automation.

• Extensive hands-on experience with AWS, GitLab CI/CD, Terraform, and Linux administration in live production settings.

• Proficiency with configuration management and automation tools, particularly Ansible.

• Familiarity with containers, cloud networking, IAM, and secure infrastructure design.

• Experience in implementing cybersecurity guardrails, vulnerability remediation, and automated security validation in secure or regulated settings.

• Proven ability to troubleshoot and resolve complex infrastructure, pipeline, operating system, networking, container, and security challenges independently.

• Strong technical communication, documentation, and independent problem-solving skills, with the capability to collaborate effectively across application, cloud, architecture, and cybersecurity teams while managing competing priorities.

• Active DoW Secret security clearance.

• Active DoDI 8140-compliant certification (e.g., Security+, CISSP, CISM) or the ability to obtain such certification.

• Preferred: Experience with AWS GovCloud and familiarity with NIST, RMF, DoD 8140, and DoD authorization/compliance processes.

• Preferred: Experience with Kubernetes/EKS, ECR, GitOps, and containerized application delivery.

• Preferred: Familiarity with Army/DoW security and monitoring tools such as ACAS, Elastic Agent, and CloudWatch agents.

• Preferred: Experience in standardizing DevSecOps and cloud capabilities at scale and supporting ATO activities.

• Preferred: Experience working within a SAFe Agile Release Train (ART) or supporting Army, DoD, or other mission-critical systems.

🏝️ Benefits

• Occasional travel for PI Planning, program events, user engagement sessions, and key milestones.