Cloud Security Engineer II: DevSecOps & Compliance

Base-2 Solutions, LLC.; Bethesda, Northern (MD, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Base-2 Solutions, LLC. is seeking a Cloud Security Engineer 2 to secure, harden, and maintain compliance of cloud-based platforms across secure networks in support of OSINT-focused mission systems.

The role requires TS/SCI with CI polygraph eligibility, DoD 8570.01-M IAT II+ certification, and hands-on cloud security experience in AWS and Kubernetes, with integration into CI/CD pipelines. A strong RMF/compliance background is essential.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph
• Bachelor’s degree or equivalent with minimum 3 years of experience, or 5 years with high school
• 1+ years cloud experience configuring and deploying AWS services
• Experience securing Kubernetes platforms and CI/CD pipelines
• Familiar with RMF, vulnerability management and cloud security best practices

Responsibilities

• Provide technical security expertise for cloud environments
• Perform security assessments and risk analyses for cloud systems
• Implement and manage security controls for Kubernetes clusters
• Integrate security into CI/CD pipelines and DevSecOps
• Develop and maintain ATO packages for compliance standards
• Collaborate with stakeholders to ensure regulatory compliance

Skills

Cloud security

AWS security

Kubernetes security

CI/CD security

RMF vulnerability management

DoD IAT II+ certification

Security clearance TS/SCI

Education

Bachelor’s degree or equivalent

Associates degree with experience

Master’s/PhD with experience

Tools

Splunk

Nessus

SonarQube

Prisma Cloud

DAST/SAST tools

Job description

Base-2 Solutions, LLC. is seeking a Cloud Security Engineer 2 to secure, harden, and maintain compliance of cloud-based platforms across secure networks in support of OSINT-focused mission systems.

The role requires TS/SCI with CI polygraph eligibility, DoD 8570.01-M IAT II+ certification, and hands-on cloud security experience in AWS and Kubernetes, with integration into CI/CD pipelines. A strong RMF/compliance background is essential.