AWS Cloud & DevOps Security Exploitation Specialist

CACI International Inc.; United States; Remote; USD 90,000 - 190,000; Full time

Job summary

CACI is seeking a Cloud/DevOps Exploitation Specialist to build, secure, assess, and evolve the AWS environment supporting continuous attack-surface operations. This hands‑on role centers on Terraform and Ansible engineering, validating cloud identity paths, supply-chain weaknesses, and CI/CD exploitation scenarios within approved scope.

The role provides ongoing technical assessment support for proactive testing of federal cyber assets, including .gov domains and internet-facing assets, to

Qualifications

• U.S. citizenship required.
• Eligibility for Public Trust (High Risk) fitness determination is required.
• Five+ years in cloud/DevOps/DevSecOps with at least 3 years hands‑on AWS and IaC work.
• Advanced experience with Terraform and Ansible in production environments.
• Strong knowledge of AWS IAM, VPC, EC2, S3, KMS, CloudTrail, serverless and container services.

Responsibilities

• Design, implement, and maintain AWS network, IAM, compute, storage, data, logging, and security using Terraform modules and Ansible.
• Operate secure version-control, testing, state-management, secrets, approvals, deployment, rollback, and change-audit processes for IaC.
• Build and maintain CI/CD pipelines that deploy assessment infrastructure and integrate IaC, secrets, dependencies, containers, and security testing.

Skills

AWS

Terraform

Ansible

CI/CD

Terraform Modules

GIt/GitHub Actions

Docker

Kubernetes/EKS

Security Testing Tools

Python

Bash

PowerShell

Linux

Networking

IAM/VPC/EC2/S3

TFsec/Checkov/Trivy

Tools

Terraform

Ansible

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

ECR

Job description

CACI is seeking a Cloud/DevOps Exploitation Specialist to build, secure, assess, and evolve the AWS environment supporting continuous attack-surface operations. This hands‑on role centers on Terraform and Ansible engineering, validating cloud identity paths, supply-chain weaknesses, and CI/CD exploitation scenarios within approved scope.

The role provides ongoing technical assessment support for proactive testing of federal cyber assets, including .gov domains and internet-facing assets, to