Cloud & DevSecOps Engineer

Command Post Technologies, Inc.; Suffolk (VA); Presencial; USD 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

Leadership training

401k with matching

ESOP

Tuition reimbursement

Flexible hours

Descripción de la vacante

Command Post Technologies, Inc. (CPT) is seeking a Cloud & DevSecOps Engineer to automate infrastructure pipelines powering J7 JTSD's Azure environments.

Based in Suffolk, VA, you will eliminate manual provisioning by coding infrastructure, baselining configurations, and validating CI/CD security. You will write IaC with Terraform and Azure Bicep/ARM, implement DISA STIGs, and deploy AKS workloads while integrating security checks in Azure DevOps.

Formación

• U.S. Citizenship required.
• Bachelor’s degree in CS/Engineering/IT or equivalent experience.
• 5+ years of progressive engineering experience (or 3+ years with a Master’s).
• Active Secret clearance.
• 2+ years writing production Terraform or Azure Bicep/ARM templates.
• 2+ years creating Ansible playbooks for OS config or hardening.
• 2+ years managing Azure resources (VNets/VMs/Storage).
• DoD 8570/8140 IAT Level II cert (Security+ CE, CySA+ or CCNA Security).

Responsabilidades

• Write and maintain IaC with Terraform, Azure Bicep, and Ansible.
• Implement automated OS hardening for RHEL and Windows VMs.
• Build secure CI/CD pipelines in Azure DevOps for scans and policy enforcement.
• Deploy and manage workloads in AKS and Azure Container Registry.
• Automate monitoring, log forwarding, and security telemetry to SIEM.

Conocimientos

Problem solving

Communication

Collaboration

Educación

Bachelor's degree in CS/Engineering/IT

Herramientas

Terraform

Azure Bicep/ARM

Ansible

Azure DevOps

AKS

Azure Container Registry

DISA STIG

PowerShell DSC

Descripción del empleo

Description

Command Post Technologies, Inc. is seeking a Cloud & DevSecOps Engineer to build and automate the infrastructure pipelines that power J7 JTSD's Azure environments. Based out of Suffolk, VA, you will work in tandem with NIWC and contractor architects to eliminate manual provisioning by coding infrastructure, automated configuration baselines, and CI/CD security validation.

As a Cloud & DevSecOps Engineer your duties will include the following, but are not limited to:

• Write, test, and maintain production-grade Infrastructure as Code using Terraform, Azure Bicep, and Ansible.
• Implement automated operating system hardening playbooks (DISA STIG compliance) for Red Hat Enterprise Linux and Windows Server virtual machines.
• Construct secure CI/CD pipelines in Azure DevOps to automate code vulnerability scans, static code analysis (SonarQube), and IaC policy enforcement.
• Deploy and manage containerized application workloads utilizing Azure Kubernetes Service (AKS) and Azure Container Registry.
• Automate continuous monitoring agents, log collection forwarders, and security telemetry routing to SIEM solutions.

Requirements

• U.S. Citizenship
• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or related technical field (or equivalent work experience)
• 5+ years of progressive engineering experience (or 3+ years with a Master’s degree)
• Active Secret clearance
• Minimum 2+ years writing and maintaining production Terraform configurations or Azure Bicep / ARM templates.
• Hands-on experience developing Ansible playbooks for OS configuration, application deployment, or hardening.
• Minimum 2+ years managing virtual networks, virtual machines, and storage accounts in Microsoft Azure.
• Current DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, or CCNA Security)
• Strong problem-solving skills and ability to troubleshoot complex issues
• Effective communication and collaboration skills

Preferred Qualifications

• Active Top Secret clearance with SCI eligibility.
• Microsoft Certified: Azure Administrator Associate (AZ-104) and/or DevOps Engineer Expert (AZ-400); HashiCorp Certified: Terraform Associate.
• Demonstrable experience automating DISA STIG remediation across RHEL 8/9 and Windows Server using Ansible or PowerShell DSC.
• Practical experience integrating automated security gates (Trivy, Checkov, SonarQube, Prisma Cloud) into Azure DevOps or GitLab CI pipelines.
• Direct experience deploying and operating production Azure Kubernetes Service (AKS) clusters in government-regulated environments.
• Strong technical documentation, briefing, and reporting experience

About us:

We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results.

What’s In It for You

• Great health benefits (for more info contact us directly)
• Leadership training
• 401k with generous company matching
• Employee Stock Ownership Plan (ESOP)
• Career professional development
• Tuition reimbursement
• Flexible hoursWork/Life balance
• Rewards and recognition
• Paid Time Off
• Parental Leave

Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event.

Command Post Technologies Inc. (CPT) is an Equal Employment Opportunity and Affluent Action employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We take Affluent Action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.

We abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants. An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions.