AWS DevSecOps Engineer

Entarian•North Charleston, SC

About The Position

Entarian is seeking for a skilled AWS DevSecOps Engineer to support Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. This role combines cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering. You will collaborate closely with software engineers to design secure systems, automate operations, and ensure the reliability, scalability, and security of our AWS cloud environments. An automation‑first mindset is critical — we aim to eliminate manual security tasks through self‑healing and compliant infrastructure.

Requirements

Bachelor’s degree in Engineering from an Accreditation Board for Engineering and Technology (ABET) accredited program, with Seven (7) plus years of IT professional experience
3+ years experience specifically in AWS Cloud Security, DevOps, or DevSecOps.
Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security.
Strong automation mindset with a history of developing guardrails, auto-remediation, or security tooling.
Proficiency in Python, Bash, or Go.
Strong knowledge of AWS core services: EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, Security Hub.
Proficient with Terraform or CloudFormation.
Experience overseeing the creation of hybrid software, web and hardware products from initial specifications to final rollout and maintenance.
Experience integrating various network operating systems, application programs and hardware devices through system specification, design, coding, testing and maintenance support.
Individual shall consider overall project design including cost, schedule, and social issues that may be associated with a project.

Nice To Haves

Experience implementing SOAR platforms or building serverless auto-remediation using Lambda/Step Functions.
AWS Security Specialty or AWS DevOps Professional certification.
Experience securing Kubernetes/EKS workloads and container registries.
Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001.

Responsibilities

Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing.
Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools (Jenkins, GitLab CI, AWS CodePipeline).
Automate operational tasks and security workflows using Python, Bash, or Go.
Create SOAR-style automated incident response playbooks and threat detection routines.
Manage and enhance CI/CD tools such as Jenkins, Git, Jira, Artifactory, and SonarQube.
Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation).
Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.
Deploy, configure, and manage AWS-native network security tools: AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
Maintain and operate virtualized NGFWs (Palo Alto, Fortinet, Check Point) running in AWS.
Monitor and analyze firewall logs, IDS/IPS alerts, VPC flow logs to identify and mitigate threats.
Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services.
Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management.
Conduct performance, availability, and security assessments across cloud and container environments.
Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
Maintain system documentation, architecture diagrams, and security procedures.
Implement and enforce least-privilege principles using AWS IAM, SSO, and identity integrations.
Automate permission audits and cloud security posture monitoring.
Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001.