Automation & AI Engineer

ECS; Fairfax (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

ECS is seeking an Automation Engineer to support a DoD program, working across AWS GovCloud, Azure Government, and on-premises data centers. You will design, build, and maintain automation capabilities, including infrastructure as code, configuration management, and compliance workflows, following STIG and RMF guidelines.

You will develop Python tools, Terraform modules, and GitHub-based pipelines to reduce manual work, ensure auditable changes, and provide scheduled reports and dashboards.

Qualifications

• U.S. citizen with DoD Secret or higher clearance.
• Bachelor's degree or equivalent in CS/IS/Engineering.
• 5+ years in systems engineering, DevOps, SRE, or automation.
• Strong Python development for automation & data processing; REST APIs.
• Terraform production experience, including modules & remote state.

Responsibilities

• Automate patch orchestration, STIG hardening, and drift remediation for Windows and Linux.
• Develop Python tools for automation and compliance workflows; parse STIG CKL files and process ACAS/Nessus exports.
• Create reusable Terraform modules for AWS GovCloud and Azure Government.</br>Manage IaC and version control without impacting production.
• Build and maintain GitHub workflows and CI/CD pipelines enforcing reviews and tests.
• Integrate security scanning into delivery workflows (Checkov, tfsec, etc.).
• Collaborate in Jira agile ceremonies and coordinate with stakeholders to meet mission and security requirements.

Skills

Python development

Git & GitHub workflows

Windows & Linux administration

REST API integration

DevOps / SRE

CI/CD

Education

Bachelor's degree in CS/IS/Engineering or related field

Equivalent combination of education and hands-on experience

Tools

Terraform

Docker

Kubernetes

Ansible

PowerShell

Job description

Job Description

ECS is seeking an Automation Engineer to support a Department of Defense (DoD) program.

ECS is seeking an experienced, mission-focused Automation Engineer to join an engineering team responsible for a hybrid environment spanning Amazon Web Services (AWS) GovCloud, Microsoft Azure Government, and on-premises data center infrastructure. The Automation Engineer will design, build, and maintain the program's automation capabilities, including infrastructure as code, configuration management, compliance workflow automation, and GitHub-based delivery pipelines. This role will reduce manual effort, improve consistency, and ensure that infrastructure and compliance changes are reviewed, versioned, tested, repeatable, and auditable in accordance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) guidelines.

Primary Responsibilities

• Automate patch orchestration, DISA STIG hardening, configuration validation, and drift remediation for Windows and Linux systems.
• Develop Python tools that automate operational and cybersecurity compliance workflows, including parsing and generating STIG Checklist (CKL) files; consuming ACAS and Nessus exports; tracking IAVM and POA&M status; and producing scheduled reports and dashboards.
• Design, develop, and maintain reusable Terraform modules for AWS GovCloud and Azure Government compute, networking, identity and access management, storage, and monitoring resources.
• Bring existing manually provisioned infrastructure under version control and infrastructure-as-code management without disrupting production operations.
• Use JSON, YAML, CSV, and REST application programming interfaces (API) to exchange data and integrate platforms in the environment, including Jira, Splunk, NetBox, Infoblox, NetApp ONTAP, Active Directory, and cloud-provider services.
• Replace manual runbook steps with idempotent, logged, testable, and auditable automation that supports CCB review and cybersecurity evidence requirements.
• Develop and maintain GitHub workflows and continuous integration and continuous delivery (CI/CD) pipelines that enforce branching, pull‑request, code‑review, testing, and release controls.
• Incorporate infrastructure‑as‑code, configuration, and application security scanning into automated delivery workflows and address identified findings.
• Work from the team backlog in Jira under an Agile/Scrum delivery cadence; participate in asynchronous standups, sprint planning, backlog refinement, reviews, and demonstrations.
• Coordinate with engineering, cybersecurity, operations, and program stakeholders to prioritize automation opportunities and ensure solutions meet mission, security, and operational requirements.
• Other duties, as assigned.

Salary Range: $120,000 - $170,000

Benefits

General Description of Benefits

Required Skills

• U.S. citizen.
• Active Department of Defense (DoD) Secret or higher security clearance.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field of study, or an equivalent combination of education and hands‑on experience.
• 5+ years of professional experience in systems engineering, DevOps, site reliability engineering, or automation engineering roles.
• Strong hands‑on Python development experience for automation and integration, including JSON, YAML, and CSV data processing; REST API integration; error handling; logging; and unit testing.
• Production experience with Terraform, including reusable modules, remote state, workspaces, and AWS and/or Azure providers.
• Proficiency with Git and GitHub workflows.
• Working knowledge of Windows Server and Linux administration, Active Directory, and enterprise networking fundamentals.
• Working knowledge of DoD cybersecurity compliance requirements and processes
• Ability to work onsite as required by the program.

Desired Skills

• Experience supporting AWS GovCloud and/or Azure Government, including Government Community Cloud High (GCC High), Impact Level 4 or 5 workloads, and FedRAMP High considerations.
• PowerShell development experience for Windows automation in conjunction with Python.
• Experience with infrastructure‑as‑code and configuration security scanning tools such as Checkov, tfsec, ansible‑lint, and static application security testing (SAST) platforms.
• Experience automating STIG compliance at scale using CKL generation and parsing, Evaluate‑STIG, Security Content Automation Protocol (SCAP), or Ansible STIG roles, including production of Enterprise Mission Assurance Support Service (eMASS)-ready evidence.
• Experience integrating and automating Splunk, Nagios, NetBox, Infoblox, NetApp ONTAP, or similar enterprise platforms.
• Experience with Docker, Kubernetes, or other container and orchestration technologies.
• Experience with cloud‑native automation services such as AWS Systems Manager or Azure Automation.
• Experience using large language model APIs or agentic automation platforms, including Amazon Bedrock or Azure OpenAI, for operational tooling.
• Current certifications such as HashiCorp Terraform Associate, Red Hat Ansible Automation, AWS or Azure Solutions Architect, or DoD 8140-aligned certifications such as Security+ or higher.
• Prior experience supporting DoD or other Federal programs under Agile delivery and CCB‑controlled change processes.
• Production experience with Ansible, including playbooks, roles, inventories, vault, and management of Windows and Linux targets.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission‑critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high‑performing teams
• Fostering a culture that is engaging, accountable, and mission‑driven.

Meet the challenge. Make a difference with Everforth ECS!