AWS DevSecOps Engineer – Secret Clearance | North Charleston, SC

Cambridge International Systems Inc•Charleston, SC

1d•Onsite

About The Position

Cambridge International Systems, Inc. is seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required. The role involves combining cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure.

Requirements

Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position.
Bachelor’s degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program.
Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps.
Current Security+ certification required.
Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance.
Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security.
Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling.
Proficiency in Python, Bash, or Go.
Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub.
Proficiency with Terraform or CloudFormation.
Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support.
Must have a current and active DoD Secret security clearance.

Nice To Haves

Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions.
AWS Security Specialty or AWS DevOps Professional certification.
Experience securing Kubernetes/EKS workloads and container registries.
Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001.

Responsibilities

Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing.
Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline.
Automate operational tasks and security workflows using Python, Bash, or Go.
Create SOAR-style automated incident response playbooks and threat detection routines.
Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube.
Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation).
Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.
Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS.
Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats.
Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services.
Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management.
Conduct performance, availability, and security assessments across cloud and container environments.
Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
Maintain system documentation, architecture diagrams, and security procedures.
Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations.
Automate permission audits and cloud security posture monitoring.
Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001.