AWS DevSecOps & Cloud Security Engineer

Booz Allen Hamilton•San Antonio, TX

About The Position

As a senior platform DevSecOps engineer at Booz Allen, the AWS DevSecOps and cloud security subject matter expert will develop, manage, and secure cloud-native applications and container platforms supporting Air Force and Department of Defense missions. The role builds automation and security controls for reliable deployment of mission applications and AI-enabled capabilities in AWS GovCloud. The engineer collaborates with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents built with Booz Allen’s Agent Foundry, enterprise knowledge and retrieval applications, data analytics platforms, and computer vision capabilities. The work includes designing secure AWS architectures; developing Infrastructure as Code; and building and maintaining CI/CD pipelines with automated testing, security scanning, and policy enforcement. The engineer manages and hardens containerized workloads, implements identity and access controls, network segmentation, encryption, and secrets management, and establishes repeatable deployment processes across environments. The role translates cybersecurity requirements into automated controls and supports Risk Management Framework and Authority to Operate activities through technical implementation and evidence generation. It also implements logging, monitoring, and alerting; supports vulnerability remediation and operational troubleshooting; improves application reliability and security; reviews architectures; evaluates cloud and container technologies; and mentors engineers in secure development and DevSecOps practices.

Requirements

5+ years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering.
3+ years of experience designing, deploying, and securing AWS environments using identity, networking, encryption, logging, and monitoring services such as IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
Experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or AWS CDK.
Experience building, maintaining, and troubleshooting CI/CD pipelines with automated builds, testing, security checks, and releases across environments using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services.
Experience deploying and managing containerized workloads using Docker and Kubernetes.
Experience integrating vulnerability management, application and infrastructure security scanning, secrets management, software supply chain security, and compliance checks into delivery workflows.
Experience with Linux system administration and automation using Bash or Python.
Experience working with application development and cybersecurity teams across the software development lifecycle, with knowledge of Zero Trust principles and secure-by-design practices.
Ability to obtain a Secret clearance.
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering.

Nice To Haves

Experience supporting Air Force, Space Force, Department of Defense, or Intelligence Community programs, including work in AWS GovCloud or other regulated cloud environments.
Experience supporting RMF and ATO activities and implementing NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements.
Experience with Kubernetes and container security, Amazon EKS, GitOps, Policy-as-Code, or automated compliance validation.
Experience deploying and operating AI and ML, generative AI, computer vision, or data analytics applications, including MLOps or LLMOps practices.
Experience with Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, or agentic AI platforms.
Experience implementing cloud security posture management, continuous monitoring, enterprise observability, or incident response processes.
Secret clearance.
Master’s degree in a technical field.
AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified DevOps Engineer – Professional certification.
CISSP, Security+, or an equivalent cybersecurity certification.

Responsibilities

Develop, manage, and secure cloud-native applications and container platforms supporting Air Force and Department of Defense missions.
Build automation and security controls for reliable deployment of mission applications and AI-enabled capabilities in AWS GovCloud.
Collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents, knowledge and retrieval applications, data analytics platforms, and computer vision capabilities.
Design secure AWS architectures and develop Infrastructure as Code.
Build, maintain, and troubleshoot CI/CD pipelines that integrate automated testing, security scanning, and policy enforcement.
Manage and harden containerized workloads.
Implement identity and access controls, network segmentation, encryption, and secrets management.
Establish repeatable deployment processes across environments.
Translate cybersecurity requirements into automated controls and support RMF and ATO activities through technical implementation and evidence generation.
Implement logging, monitoring, and alerting; support vulnerability remediation and operational troubleshooting; and improve the reliability and security of cloud-hosted applications.
Review architectures and evaluate cloud and container technologies.
Mentor engineers on secure development and DevSecOps practices.