Cloud & DevSecOps Engineer

Command Post Technologies, Inc.•Suffolk, VA

6h•Onsite

About The Position

Command Post Technologies, Inc. is seeking a Cloud & DevSecOps Engineer to build and automate the infrastructure pipelines supporting J7 JTSD’s Azure environments. Based in Suffolk, Virginia, the role works with NIWC and contractor architects to replace manual provisioning with infrastructure as code, automated configuration baselines, and CI/CD security validation. The engineer develops and maintains infrastructure automation, OS hardening, secure CI/CD pipelines, containerized workloads, and security monitoring integrations. The company describes itself as a Service-Disabled, Veteran-Owned Small Business providing engineering services in cybersecurity, software development, test and evaluation, and strategic planning. CPT emphasizes integrity, determination, innovation, communication, accountability, resourcefulness, and a healthy work-life balance.

Requirements

U.S. citizenship.
Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or a related technical field, or equivalent work experience.
At least 5 years of progressive engineering experience, or at least 3 years with a Master’s degree.
Active Secret clearance.
At least 2 years writing and maintaining production Terraform configurations or Azure Bicep/ARM templates.
Hands-on experience developing Ansible playbooks for OS configuration, application deployment, or hardening.
At least 2 years managing virtual networks, virtual machines, and storage accounts in Microsoft Azure.
Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, or CCNA Security.
Strong problem-solving skills and ability to troubleshoot complex issues.
Effective communication and collaboration skills.

Nice To Haves

Active Top Secret clearance with SCI eligibility.
Microsoft Certified: Azure Administrator Associate (AZ-104), DevOps Engineer Expert (AZ-400), and/or HashiCorp Certified: Terraform Associate.
Demonstrable experience automating DISA STIG remediation across RHEL 8/9 and Windows Server using Ansible or PowerShell DSC.
Practical experience integrating automated security gates such as Trivy, Checkov, SonarQube, or Prisma Cloud into Azure DevOps or GitLab CI pipelines.
Direct experience deploying and operating production AKS clusters in government-regulated environments.
Strong technical documentation, briefing, and reporting experience.

Responsibilities

Write, test, and maintain production-grade Infrastructure as Code using Terraform, Azure Bicep, and Ansible.
Implement automated DISA STIG-compliant operating system hardening playbooks for Red Hat Enterprise Linux and Windows Server virtual machines.
Build secure Azure DevOps CI/CD pipelines that automate code vulnerability scans, static code analysis, and infrastructure-as-code policy enforcement.
Deploy and manage containerized application workloads using Azure Kubernetes Service (AKS) and Azure Container Registry.
Automate continuous monitoring agents, log collection forwarders, and security telemetry routing to SIEM solutions.