AWS DevSecOps & Cloud Security Engineer
About The Position
Booz Allen is seeking a senior platform DevSecOps engineer to serve as the team’s AWS DevSecOps and cloud security subject matter expert, supporting Air Force and Department of Defense missions. The role focuses on developing, managing, and securing cloud-native applications and container platforms in AWS GovCloud, including mission applications and AI-enabled capabilities. The engineer will collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents, enterprise knowledge and retrieval applications, data analytics platforms, and computer vision capabilities. The role includes designing secure AWS architectures, developing Infrastructure as Code, and building and maintaining CI/CD pipelines with automated testing, security scanning, and policy enforcement. The position also involves hardening containerized workloads; implementing identity and access controls, network segmentation, encryption, and secrets management; and establishing repeatable deployment processes across environments. The engineer will translate cybersecurity requirements into automated controls and support Risk Management Framework and Authority to Operate activities through technical implementation and evidence generation. Additional work includes implementing logging, monitoring, and alerting; supporting vulnerability remediation and operational troubleshooting; reviewing architectures and technologies; and mentoring engineers in secure development and DevSecOps practices.
Requirements
- 5+ years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering.
- 3+ years of experience designing, deploying, and securing AWS environments using identity, networking, encryption, logging, and monitoring services such as IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
- Experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or AWS CDK.
- Experience building, maintaining, and troubleshooting CI/CD pipelines with automated builds, testing, security checks, and releases across environments using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services.
- Experience deploying and managing containerized workloads using Docker and Kubernetes.
- Experience integrating vulnerability management, application and infrastructure security scanning, secrets management, software supply chain security, and compliance checks into delivery workflows.
- Experience with Linux system administration and automation using Bash or Python.
- Experience working with application development and cybersecurity teams across the software development lifecycle.
- Knowledge of Zero Trust principles and secure-by-design practices.
- Ability to obtain a Secret clearance.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering.
Nice To Haves
- Experience supporting Air Force, Space Force, Department of Defense, or Intelligence Community programs, including work in AWS GovCloud or other regulated cloud environments.
- Experience supporting RMF and ATO activities and implementing NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements.
- Experience with Kubernetes and container security, Amazon EKS, GitOps, Policy-as-Code, or automated compliance validation.
- Experience deploying and operating AI and ML, generative AI, computer vision, or data analytics applications, including MLOps or LLMOps practices.
- Experience with Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, or agentic AI platforms.
- Experience implementing cloud security posture management, continuous monitoring, enterprise observability, or incident response processes.
- Secret clearance.
- Master’s degree in a technical field.
- AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified DevOps Engineer – Professional certification.
- CISSP, Security+, or an equivalent cybersecurity certification.
Responsibilities
- Serve as the team’s AWS DevSecOps and cloud security subject matter expert.
- Develop, manage, and secure cloud-native applications and container platforms in AWS GovCloud.
- Collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate mission capabilities.
- Design secure AWS architectures and develop Infrastructure as Code.
- Build, maintain, and troubleshoot CI/CD pipelines incorporating automated testing, security scanning, and policy enforcement.
- Manage and harden containerized workloads.
- Implement identity and access controls, network segmentation, encryption, and secrets management.
- Establish repeatable deployment processes across environments.
- Translate cybersecurity requirements into automated controls and support RMF and ATO activities through technical implementation and evidence generation.
- Implement logging, monitoring, and alerting.
- Support vulnerability remediation and operational troubleshooting.
- Improve the reliability and security of cloud-hosted applications.
- Review architectures and evaluate cloud and container technologies.
- Mentor engineers on secure development and DevSecOps practices.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
