AWS DevSecOps & Cloud Security Engineer
About The Position
Booz Allen is hiring a senior platform DevSecOps engineer to serve as the team’s AWS DevSecOps and cloud security subject matter expert. The role supports Air Force and Department of Defense missions by developing, managing, and securing cloud-native applications and container platforms in AWS GovCloud, including mission applications and AI-enabled capabilities. The engineer will collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents, enterprise knowledge and retrieval applications, data analytics platforms, and computer vision capabilities. The work includes designing secure AWS architectures; developing Infrastructure as Code; building and maintaining CI/CD pipelines with automated testing, security scanning, and policy enforcement; and managing and hardening containerized workloads. The role also involves implementing identity and access controls, network segmentation, encryption, and secrets management; establishing repeatable deployment processes; translating cybersecurity requirements into automated controls; and supporting Risk Management Framework and Authority to Operate activities through technical implementation and evidence generation. The engineer will implement logging, monitoring, and alerting, support vulnerability remediation and operational troubleshooting, improve application reliability and security, review architectures and cloud and container technologies, and mentor engineers on secure development and DevSecOps practices.
Requirements
- At least 5 years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering.
- At least 3 years of experience designing, deploying, and securing AWS environments using identity, networking, encryption, logging, and monitoring services such as IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
- Experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or AWS CDK.
- Experience building, maintaining, and troubleshooting CI/CD pipelines with automated builds, testing, security checks, and releases across environments, using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services.
- Experience deploying and managing containerized workloads using Docker and Kubernetes.
- Experience integrating vulnerability management, application and infrastructure security scanning, secrets management, software supply chain security, and compliance checks into delivery workflows.
- Experience with Linux system administration and automation using Bash or Python.
- Experience working with application development and cybersecurity teams across the software development lifecycle, with knowledge of Zero Trust principles and secure-by-design practices.
- Ability to obtain a Secret clearance.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering.
Nice To Haves
- Experience supporting Air Force, Space Force, Department of Defense, or Intelligence Community programs, including work in AWS GovCloud or other regulated cloud environments.
- Experience supporting RMF and ATO activities and implementing NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements.
- Experience with Kubernetes and container security, Amazon EKS, GitOps, Policy-as-Code, or automated compliance validation.
- Experience deploying and operating AI and ML, generative AI, computer vision, or data analytics applications, including MLOps or LLMOps practices.
- Experience with Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, or agentic AI platforms.
- Experience implementing cloud security posture management, continuous monitoring, enterprise observability, or incident response processes.
- Secret clearance.
- Master’s degree in a technical field.
- AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified DevOps Engineer – Professional certification.
- CISSP, Security+, or an equivalent cybersecurity certification.
Responsibilities
- Develop, manage, and secure cloud-native applications and container platforms supporting Air Force and Department of Defense missions in AWS GovCloud.
- Serve as the team’s AWS DevSecOps and cloud security subject matter expert.
- Collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents, enterprise knowledge and retrieval applications, data analytics platforms, and computer vision capabilities.
- Design secure AWS architectures and develop Infrastructure as Code.
- Build, maintain, and troubleshoot CI/CD pipelines incorporating automated testing, security scanning, and policy enforcement.
- Manage and harden containerized workloads.
- Implement identity and access controls, network segmentation, encryption, and secrets management.
- Establish repeatable deployment processes across environments.
- Translate cybersecurity requirements into automated controls and support RMF and ATO activities through technical implementation and evidence generation.
- Implement logging, monitoring, and alerting; support vulnerability remediation and operational troubleshooting; and improve the reliability and security of cloud-hosted applications.
- Review architectures and evaluate cloud and container technologies.
- Mentor engineers on secure development and DevSecOps practices.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
