AWS DevSecOps Engineer – Secret Clearance | North Charleston, SC

Cambridge International Systems Inc; Charleston (SC); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with match

Paid time off and holidays

Relocation assistance

Sign-on bonuses

Employee referral program

Job summary

Cambridge International Systems, Inc. seeks an AWS DevSecOps Engineer to support NIWC Atlantic in North Charleston, SC. This on-site role requires DoD Secret clearance and five-day in-office work with one optional telework day.

You will design secure AWS architectures, embed security into CI/CD, automate operations, and manage container workloads with ECS/EKS while maintaining firewall and network security controls.

Qualifications

• Bachelor’s degree in Computer Science or related Engineering field (ABET-accredited).
• 7+ years IT experience with at least 3 years in AWS Cloud Security/DevSecOps.
• Current Security+ certification.
• Experience delivering hybrid software/web/hardware products from specs to rollout.

Responsibilities

• Design, implement, and maintain DevSecOps pipelines (CI/CD, monitoring, automated security testing).
• Embed SAST/DAST/SCA and compliance checks into CI/CD tools (Jenkins, GitLab CI, CodePipeline).
• Automate security tasks with Python, Bash, or Go.
• Create automated incident response playbooks and threat detection routines.

Skills

AWS security

DevSecOps

Automation

Python

Bash

Go

Cloud security

Education

ABET-accredited CS/Engineering degree

Security+ certification

Tools

Terraform

CloudFormation

Jenkins

GitLab CI

AWS CodePipeline

Jira

SonarQube

Job description

AWS DevSecOps Engineer – Secret | North Charleston, SC

Cambridge International Systems, Inc.

Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you’ll work alongside top talent worldwide, tackling some of today’s most complex and critical challenges in defense and security.

We are currently seeking an AWS DevSecOps Engineer to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division in North Charleston, SC. This is a full-time, CONUS, on-site office position requiring attendance five days per week, with one optional telework day. An active DoD Secret security clearance is required.

What You’ll Do

As an AWS DevSecOps Engineer, you will combine cloud security architecture, DevSecOps automation, and advanced firewall/network security engineering to design secure systems, automate operations, and ensure the reliability, scalability, and security of AWS cloud environments. An automation-first mindset is critical, with a focus on eliminating manual security tasks through self-healing and compliant infrastructure. You will:

• Design, implement, and maintain DevSecOps pipelines supporting CI/CD, continuous monitoring, and automated security testing.
• Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools such as Jenkins, GitLab CI, and AWS CodePipeline.
• Automate operational tasks and security workflows using Python, Bash, or Go.
• Create SOAR-style automated incident response playbooks and threat detection routines.
• Manage and enhance CI/CD tools including Jenkins, Git, Jira, Artifactory, and SonarQube.
• Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, CloudFormation).
• Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
• Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.
• Deploy, configure, and manage AWS-native network security tools including AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
• Maintain and operate virtualized NGFWs such as Palo Alto, Fortinet, and Check Point running in AWS.
• Monitor and analyze firewall logs, IDS/IPS alerts, and VPC flow logs to identify and mitigate threats.
• Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services.
• Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route53, IAM, RDS, CloudTrail, and CloudWatch.
• Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management.
• Conduct performance, availability, and security assessments across cloud and container environments.
• Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
• Maintain system documentation, architecture diagrams, and security procedures.
• Implement and enforce least privilege principles using AWS IAM, SSO, and identity integrations.
• Automate permission audits and cloud security posture monitoring.
• Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001.

What You’ll Bring

Required Qualifications

Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position.

• Education & Experience:
  • Bachelor’s degree in Computer Science or related Engineering field from an Accreditation Board for Engineering and Technology (ABET) accredited program.
  • Seven (7) plus years of IT professional experience, with at least three (3) years specifically in AWS Cloud Security, DevOps, or DevSecOps.
  • Current Security+ certification required.
  • Experience overseeing the creation of hybrid software, web, and hardware products from initial specifications through final rollout and maintenance.
• Technical Expertise:
  • Hands‑on experience with AWS firewalls, NGFWs, IDS/IPS, and advanced network security.
  • Strong automation mindset with a history of developing guardrails, auto‑remediation, or security tooling.
  • Proficiency in Python, Bash, or Go.
  • Strong knowledge of AWS core services including EC2, VPC, RDS, Lambda, S3, CloudTrail, GuardDuty, and Security Hub.

Proficiency with Terraform or CloudFormation.

Experience integrating various network operating systems, application programs, and hardware devices through system specification, design, coding, testing, and maintenance support.

• Clearance:
  • Must have a current and active DoD Secret security clearance.

Preferred (Nice to Have)

• Experience implementing SOAR platforms or building serverless auto‑remediation using Lambda/Step Functions.
• AWS Security Specialty or AWS DevOps Professional certification.
• Experience securing Kubernetes/EKS workloads and container registries.
• Experience automating compliance for SOC 2, HIPAA, PCI-DSS, or ISO 27001.

Travel Requirements

Physical & Work Environment Requirements

• On-site office environment in North Charleston, SC, requiring attendance five days per week, with one optional telework day.
• Periods of prolonged sitting and/or standing, including desk-based computer work.
• Regular use of computers, monitors, networking equipment, and other job‑related technology.
• Work is performed in a secure facility where personal electronic devices (including Bluetooth‑ or Wi‑Fi‑enabled devices) may be restricted.
• Occasional extended work hours, including evenings or weekends, as needed.
• Communication with team members, customers, and stakeholders through verbal and written methods.
• Ability to manage competing priorities, work under deadlines, and maintain attention to detail.
• Vaccine Recommendations by AOR | Health.mil

Background & Security

• Employment is contingent upon successful background investigation.
• Alcohol and Drug screening may be required for federal contract compliance.

Benefits & Perks

• Medical, dental, vision, life, accident, and critical illness insurance
• 401(k) immediate vesting and match
• Paid time off and company holidays
• Generous tuition & training support
• Relocation assistance
• Sign‑on and performance‑based bonuses
• Employee referral program
• Access to Tickets at Work, EAP, wellness initiatives, and more

Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities and comfortable working conditions. Available to part‑time and temporary employees are the benefits below:

• Referral bonuses
• Performance‑based bonuses
• Community involvement & outreach
• Wellness program
• Employee referral programAccess to Tickets at Work, EAP, wellness initiatives, and more

Join Us

If you're driven by mission, technology, and teamwork—we want to hear from you. Cambridge is growing, and this position is just one of many opportunities on our global team. Know someone perfect for the role? Referrals are welcome—both employees and non‑employees may qualify for a bonus.

Apply today and help shape the future of secure cloud computing for national security.

About Cambridge International Systems

At Cambridge, we believe innovation and agility thrive when people work together. Our culture is built on teamwork, collaboration, and a commitment to listening, learning, and bringing out the best ideas in every employee. We empower our people to take on challenges, persevere to get the job done, and lead with integrity in everything we do.

Our commitment to our employees and workplace culture has been recognized through the DAV Patriot Small Employer of the Year Award in 2026 and the Cigna Healthy Workforce Gold Designation in 2025. These recognitions reflect our ongoing commitment to creating a workplace where employees are valued, supported, and empowered to do their best work. At Cambridge, we are proud to foster an environment where people can grow, contribute, and make a meaningful impact.

Learn more at www.cbridgeinc.com.

We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to any protected status under applicable law or other similar factors that are not job‑related. We encourage all qualified individuals to apply for employment. Selected applicants may be subject to a background investigation and/or education verification.

We provide reasonable accommodation for qualified individuals with disabilities in accordance with federal, state, and local law. If you require a reasonable accommodation to participate in the application process or to perform the essential functions of the position, please contact our Recruiting Team at [e-mail].