Intermediate Automation / DevSecOps Engineer

Diné Development Corporation•Quantico, VA

About The Position

The Intermediate Automation / DevSecOps Engineer automates the provisioning, hardening, deployment, and sustainment of Department of the Air Force applications hosted in the CloudOne (AWS GovCloud) environment at DoD Impact Levels 4 through 6. Working with senior cloud engineers, the engineer builds and maintains Infrastructure as Code and DevSecOps pipelines, automates STIG compliance for operating systems, databases, and services, and supports AWS compute, storage, networking, database, and identity services. The role also maintains system documentation and architecture diagrams and helps implement Zero Trust controls across the cloud environment. The position requires at least three years of specialized cloud administration experience in Federal/Department of War environments, with expertise in GovCloud offerings. Candidates must have a high school diploma or GED equivalent and an active Top Secret security clearance. DoD 8140 certification requirements include CompTIA Security+ CE or a higher-level certification. The listed salary range is $110,000 to $128,000; actual compensation depends on several factors.

Requirements

At least 3 years of specialized experience in cloud administration within Federal/Department of War (DoW) environments, with specific expertise in GovCloud offerings such as AWS, Microsoft Azure, Google Cloud, and/or VMware vSphere.
High school diploma or GED equivalent.
Must possess and maintain an active Top Secret (TS) security clearance.
DoD 8140: CompTIA Security+ CE or a higher-level certification, such as CompTIA SecurityX (formerly CASP+) or CISSP.
Proficiency managing core AWS services, including EC2, S3, VPC, RDS, and IAM, and configuring Security Groups and NACLs to implement Zero Trust architectures.
Familiarity with CloudOne shared services, boundary protections, and ingress/egress patterns.
Experience applying DISA STIGs to Windows Server and RHEL/Linux using Group Policy or automation tools, and remediating SCAP Compliance Checker findings.
Knowledge of FIPS 140-2 encryption standards.
Proficiency with Infrastructure as Code, automation, and scripting.

Nice To Haves

AWS Certified Solutions Architect – Associate or higher.
Certified Kubernetes Administrator (CKA).
HashiCorp Certified: Terraform Associate.

Responsibilities

Develop, test, and maintain Infrastructure as Code, such as Terraform or AWS CloudFormation, to provision and configure EC2, S3/EBS, VPC, RDS, and IAM resources in AWS GovCloud.
Build, operate, and improve CI/CD and DevSecOps pipelines with integrated security scanning, approval gates, and automated application deployment.
Automate STIG hardening of Windows Server and RHEL/Linux systems using Ansible, Chef, Puppet, or Group Policy.
Run SCAP Compliance Checker (SCC) scans, analyze results, and remediate or document findings to maintain IL4/IL5/IL6 compliance.
Configure Security Groups, NACLs, and IAM policies to enforce least privilege and Zero Trust within CloudOne shared services and boundary protections.
Deploy and maintain containerized applications and support Kubernetes workloads where applicable.
Automate patching, configuration drift detection, health checks, and routine operational tasks using Python, PowerShell, Bash, or other scripting languages.
Implement and validate FIPS 140-2 compliant encryption for data at rest and in transit.
Monitor cloud resources, logs, and pipeline status; troubleshoot deployment, performance, and availability issues.
Implement approved changes through the configuration and change management process and update configuration baselines.
Maintain current system documentation, runbooks, and architecture diagrams, and provide input to monthly cloud status reporting.