AWS DevSecOps Engineer: Cloud Security & CI/CD Expert

Cambridge International Systems, Inc.; South Carolina; On-site; USD 135,000 - 175,000; Full time

Benefits offered by this job

Medical, dental, vision, life

401(k) match

Paid time off

Relocation assistance

Bonuses

Education & training support

Job summary

Cambridge International Systems, Inc. is seeking an AWS DevSecOps Engineer to support NIWC Atlantic in North Charleston, SC. This on-site role requires DoD Secret clearance and five days a week attendance with one telework day.

The successful candidate will design and maintain CI/CD pipelines, implement security controls, and manage AWS-native security tools while ensuring compliance with DoD standards and security best practices.

Qualifications

• Bachelor’s degree in Computer Science or related Engineering field from ABET-accredited program.
• Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps.
• Current Security+ certification required.
• Hands-on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security.
• Proficiency in Python, Bash, or Go.
• Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub.

Responsibilities

• Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing.
• Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline.
• Automate operational tasks and security workflows using Python, Bash, or Go.
• Create SOAR‑style automated incident response playbooks and threat detection routines.
• Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube.
• Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation).
• Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
• Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.
• Deploy, configure, and manage AWS‑native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
• Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS.
• Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats.
• Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP‑based services.
• Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
• Develop and maintain infrastructure‑as‑code for provisioning, configuration, patching, and lifecycle management.
• Conduct performance, availability, and security assessments across cloud and container environments.
• Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
• Maintain system documentation, architecture diagrams, and security procedures.
• Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations.
• Automate permission audits and cloud security posture monitoring.
• Support compliance with frameworks such as SOC 2, HIPAA, PCI‑DSS, and ISO 27001.

Skills

AWS Cloud Security

DevSecOps

Python

Bash

Go

Terraform

CloudFormation

CI/CD pipelines

SAST/DAST/SCA

Jenkins

GitLab CI

CodePipeline

Container security

ECS

EKS

Security monitoring

Education

Bachelor's degree in Computer Science or related Engineering field

Tools

AWS WAF

Security Groups

NACLs

Palo Alto

Fortinet

Check Point

Jira

Artifactory

SonarQube

Job description

Cambridge International Systems, Inc. is seeking an AWS DevSecOps Engineer to support NIWC Atlantic in North Charleston, SC. This on-site role requires DoD Secret clearance and five days a week attendance with one telework day.

The successful candidate will design and maintain CI/CD pipelines, implement security controls, and manage AWS-native security tools while ensuring compliance with DoD standards and security best practices.