Air-Gapped Security Automation Engineer

Amazon; Herndon (VA); Hybrid; USD 129,000 - 175,000; Full time

Job summary

Amazon's Security team is seeking a Systems Security Development Engineer to design, build, and integrate security automation and tooling for a U.S. Government program delivering a classified AI Factory on an air-gapped platform. You will work hands‑on with infrastructure engineers to embed security from day one across the platform.

This role requires TS/SCI with polygraph and involves multi‑vendor COTS integration, STIG hardening, and RMF evidence generation in a tightly controlled environment.

Qualifications

• 3+ years of systems engineering, systems development, or DevSecOps experience.
• Hands-on Linux administration and automation (Ansible/Terraform) and scripting (Python, Bash).
• Experience integrating security tooling into infrastructure (SIEM, endpoint, vulnerability scanning).
• Understanding of Kubernetes, containerized workloads, and infrastructure-as-code.
• Current, active TS/SCI clearance with Polygraph.

Responsibilities

• Engineer security automation for platform hardening, STIG application, and configuration enforcement.
• Build and maintain log pipelines and telemetry collection for the air‑gapped SIEM.
• Integrate security tooling (endpoint protection, vulnerability scanning, detection) into the platform stack.
• Develop and maintain infrastructure‑as‑code for security components.
• Support security control implementation and evidence generation for RMF authorization.
• Partner with platform engineering to integrate identity, secrets management, and crypto services.

Skills

Linux administration

Automation scripting

DevSecOps

Security tooling

Tools

Ansible

Terraform

Kubernetes

Bash

Job description

Amazon's Security team is seeking a Systems Security Development Engineer to design, build, and integrate security automation and tooling for a U.S. Government program delivering a classified AI Factory on an air-gapped platform. You will work hands‑on with infrastructure engineers to embed security from day one across the platform.

This role requires TS/SCI with polygraph and involves multi‑vendor COTS integration, STIG hardening, and RMF evidence generation in a tightly controlled environment.