AWS DevSecOps Engineer

acuCyber LLC; North Charleston (SC); On-site; USD 120,000 - 160,000; Full time

Job summary

acuCyber LLC seeks an AWS DevSecOps Engineer to support NIWC Atlantic Expeditionary Enterprise Systems and Services (E2S2) division. This role blends cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering.

You will collaborate with software engineers to design secure systems, automate operations, and ensure reliability, scalability, and security of AWS environments. An automation-first mindset is critical.

Qualifications

• 5+ years in DevSecOps or cloud security engineering.
• Experience integrating SAST/DAST/SCA into CI/CD.
• Strong experience with IaC and cloud security tooling.

Responsibilities

• Design, implement, and maintain DevSecOps pipelines with CI/CD, monitoring, and automated security testing.
• Embed SAST, DAST, SCA, and compliance checks into CI/CD (Jenkins, GitLab CI, CodePipeline).
• Automate security workflows with Python, Bash, or Go.
• Create automated incident response playbooks and threat detection routines.
• Manage CI/CD tools (Jenkins, Git, Jira, Artifactory, SonarQube).
• Design secure AWS architectures using Terraform/CloudFormation.
• Implement policy-as-code to prevent misconfigurations.
• Build container workloads on ECS/EKS with vulnerability management.
• Implement and monitor firewall/network security (WAF, Security Groups, NACLs).
• Maintain NGFWs in AWS (Palo Alto, Fortinet, Check Point).
• Ensure security best practices across IAM, VPN, SSO, and audits.

Skills

AWS Cloud Security

DevSecOps

CI/CD pipelines

Python

Go

Bash

Terraform

CloudFormation

SAST/DAST

Container security

Security monitoring

Tools

Jenkins

GitLab CI

AWS CodePipeline

Jira

Artifactory

SonarQube

AWS WAF

Network Firewall

Palo Alto

Fortinet

Job description

acuCyber is seeking for a skilled AWS DevSecOps Engineer to support Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. This role combines cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering. You will collaborate closely with software engineers to design secure systems, automate operations, and ensure the reliability, scalability, and security of our AWS cloud environments. An automation‑first mindset is critical — we aim to eliminate manual security tasks through self‑healing and compliant infrastructure.

Key Responsibilities:

DevSecOps Engineering & Automation

• Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing.
• Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools (Jenkins, GitLab CI, AWS CodePipeline).
• Automate operational tasks and security workflows using Python, Bash, or Go.
• Create SOAR-style automated incident response playbooks and threat detection routines.
• Manage and enhance CI/CD tools such as Jenkins, Git, Jira, Artifactory, and SonarQube.

Cloud Security Architecture

• Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation).
• Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
• Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.

Firewall, Network & Infrastructure Security

• Deploy, configure, and manage AWS-native network security tools: AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
• Maintain and operate virtualized NGFWs (Palo Alto, Fortinet, Check Point) running in AWS.
• Monitor and analyze firewall logs, IDS/IPS alerts, VPC flow logs to identify and mitigate threats.
• Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services.

Cloud Operations & Infrastructure Management

• Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
• Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management.
• Conduct performance, availability, and security assessments across cloud and container environments.
• Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
• Maintain system documentation, architecture diagrams, and security procedures.

Identity, Access & Compliance

• Implement and enforce least-privilege principles using AWS IAM, SSO, and identity integrations.
• Automate permission audits and cloud security posture monitoring.
• Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001.