DevOps Engineer (Mid) TS/SCI

PAE Government Services Inc.; Arlington (VA); On-site; USD 130,000 - 145,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

Retirement benefits (401(k) matching)

Educational reimbursement

Parent leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

PAE Government Services Inc. is hiring a DevOps Engineer to support a DoW Special Programs customer in Arlington, VA. You will work to develop applications in AWS GovCloud aimed at modernizing a secure platform for government workflows.

The ideal candidate will have at least 5 years of experience and be responsible for Infrastructure-as-Code and CI/CD pipeline operations, ensuring security compliance. Benefits include health insurance, 401(k) matching, and educational reimbursement.

Qualifications

• Minimum of 5 years of experience in AWS GovCloud or FedRAMP environments.
• Experience with CI/CD pipelines and Infrastructure-as-Code.
• Strong understanding of security practices in DevOps.

Responsibilities

• Design and maintain AWS GovCloud infrastructure for web applications.
• Implement CI/CD pipelines and enforce security controls.
• Respond to incidents and maintain operational documentation.

Skills

AWS GovCloud management

Infrastructure-as-Code

CI/CD pipeline development

Security practices integration

Python scripting

Agile development

Education

Bachelor’s degree in Information Systems Engineering or related fields

Tools

CloudFormation

CI/CD tools

PostgreSQL

Git

Terraform

JIRA

Job description

Purpose and Impact

Amentum is searching for a DevOps Engineer to join our team in Arlington, VA. You will be working in support of a DoW Special Programs customer developing a new application in AWS GovCloud. The mission is to modernize and sustain a secure, web-based platform that consolidates critical government workflows, enabling automated data management, role-based access control, and multi-level security capabilities in support of national security operations. The DevOps Engineer is responsible for owning the full platform lifecycle (infrastructure-as-code, CI/CD pipeline operations, environment stability, security posture, and incident response). You will deploy and configure services using AWS-native tooling, enforce change control discipline, and ensure the platform meets DoD IL4/IL5 compliance requirements at all times.

Work Schedule

Work is typically performed, Monday through Friday 8-hour days onsite. Flexibility within a 2-week pay period to reach 80 hours.

Essential Responsibilities

• Design, deploy, operate, patch, and maintain AWS GovCloud infrastructure supporting a production web application.
• Own all Infrastructure-as-Code using CloudFormation and CDK with disciplined version-controlled change management (no manual console modifications in production).
• Build and maintain end-to-end CI/CD pipelines covering build, test, artifact promotion, deployment approvals, and release documentation.
• Implement and maintain private networking patterns including VPC segmentation, PrivateLink, and deny-by-default egress controls.
• Enforce least-privilege access across all environment components and support NIPR/SIPR connectivity requirements as applicable.
• Integrate security practices throughout the DevOps pipeline, automating security testing, scanning, and compliance checks.
• Implement automated security controls such as static code analysis, dynamic application security testing, container scanning, and vulnerability assessment.
• Establish and maintain continuous monitoring of application and infrastructure security.
• Coordinate with the Information Systems Security Engineer on ATO evidence collection, POA&M inputs, and continuous monitoring obligations.
• Respond to incidents, conduct root cause analysis, and implement corrective actions with full documentation.
• Maintain complete operational documentation including architecture diagrams, runbooks, and SOPs.
• Operate with appreciable latitude in developing methodology and presenting solutions to problems.
• Contribute to program deliverables and performance metrics where applicable.

Minimum Requirements (Knowledge, Skills, and Abilities)

• Minimum of 5 years of experience collectively with the following:
• Operate and manage production workloads in AWS GovCloud or equivalent FedRAMP High / DoD IL4/IL5 regulated environment.
• Build and maintain Infrastructure-as-Code using CloudFormation and/or CDK with auditable change control.
• Design and operate CI/CD pipelines with artifact management, deployment approvals, and rollback procedures.
• Implement private networking (VPC design, endpoints, PrivateLink, and egress restriction patterns).
• Integrate security practices, tools, and measures into the full DevOps pipeline.
• Automate security testing, scanning, and compliance checks throughout the development lifecycle.
• Implement automated security controls including static code analysis, DAST, container scanning, and vulnerability assessment.
• Establish mechanisms for continuous monitoring of application and infrastructure security.
• Mid-level experience with Python or other scripting languages with a focus on automating operational tasks.
• Experience working in an agile development environment.

Security Clearance

Required: TS/SCI with an active DoD TS/SCI security clearance adjudicated in the last 5 years or designated CE and the ability to obtain and maintain special accesses.

Minimum Education

Bachelor’s degree in Information Systems Engineering, Computer Science, Engineering, Business, or other related fields. In absence of a degree, additional years of experience may be substituted.

Minimum Years of Experience

5-8 Years Required.

Required Certifications

• AWS Solutions Architect – Associate (minimum).
• Professional preferred.
• AWS SysOps Administrator - Associate or AWS DevOps Engineer - Professional.
• Security+ CE.

Preferred Certifications

• AWS Security- Specialty.
• ITIL Foundation.

Preferred Qualifications

• Experience supporting a DoW ATO or FedRAMP authorization process.
• Familiarity with DISA STIG compliance requirements and implementation.
• Experience operating PostgreSQL on Amazon RDS, including patching coordination and backup/restore validation.
• Experience with Keycloak or equivalent OIDC/SAML identity provider integration in a GovCloud environment.
• AWS Security‑Specialty certification.
• Git, GitLab, Terraform, Splunk, HashiCorp Vault, JIRA, Jenkins, Ansible, Amazon Web Services GovCloud, Microsoft Windows Server and Linux experience.

Compensation

$130,000 - $145,000.

Benefits

• Health, dental, and vision insurance.
• Paid time off and holidays.
• Retirement benefits (401(k) matching).
• Educational reimbursement.
• Parental leave.
• Employee stock purchase plan.
• Tax‑saving options.
• Disability and life insurance.
• Pet insurance.

EEO Statement

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.