Air-Gapped Security Automation Engineer

Socket.dev; Herndon (VA); On-site; USD 129,000 - 175,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k) matching

Paid time off

Job summary

Amazon Security is seeking a Systems Security Development Engineer to design, build, and integrate security automation for a U.S. Government program on a fully air-gapped platform. You will work with multi-vendor COTS: Kubernetes, ONTAP, NVIDIA, Cisco, Thales, integrating hardening automation and log pipelines from day one.

You must hold a TS/SCI with polygraph clearance as a US citizen, and collaborate with infrastructure engineers to ensure security is built in from the outset.

Qualifications

• 3+ years of systems engineering, systems development, or DevSecOps experience
• Hands-on Linux administration, automation (Ansible, Terraform, or equivalent), and scripting (Python, Bash)
• Experience integrating security tooling into infrastructure (SIEM, endpoint, vulnerability scanning)

Responsibilities

• Engineer security automation for platform hardening, STIG application, and configuration enforcement
• Build and maintain log pipelines and telemetry collection for the air-gapped SIEM
• Integrate security tooling into the platform stack (endpoint protection, vulnerability scanning)
• Develop and maintain infrastructure-as-code for security components
• Support security control implementation and RMF authorization evidence generation
• Partner with platform engineering to integrate identity, secrets management, and crypto services

Skills

Systems engineering

DevSecOps

Linux administration

Automation

Terraform

Python scripting

Kubernetes

Security tooling

TS/SCI clearance

Tools

Ansible

Terraform

Python

Bash

Kubernetes

SIEM

Job description

Amazon Security is seeking a Systems Security Development Engineer to design, build, and integrate security automation for a U.S. Government program on a fully air-gapped platform. You will work with multi-vendor COTS: Kubernetes, ONTAP, NVIDIA, Cisco, Thales, integrating hardening automation and log pipelines from day one.

You must hold a TS/SCI with polygraph clearance as a US citizen, and collaborate with infrastructure engineers to ensure security is built in from the outset.