DevSecOps / Cloud Engineer

Lucayan Technology Solutions LLC; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Lucayan Technology Solutions LLC is seeking a DevSecOps/Cloud Engineer to support CI/CD automation, STIG compliance automation, and cloud migration for a federal IT program with USACE CWBI Cloud. The role focuses on migrating legacy apps, automating security workflows, and leveraging secure cloud services.

The ideal candidate has 5–7 years in DevSecOps or cloud security, experience with DoD governance, and a background in AWS GovCloud. This is a US-based remote position with full-time employment.

Qualifications

• Minimum active Tier 1 (or higher) federal background investigation prior to start.
• Bachelor's degree in CS, InfoSec, or related field (or equivalent experience).
• Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security.
• Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub.
• Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud.
• Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline.
• Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles.

Responsibilities

• Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment.
• Automate DoD STIG compliance checks and vulnerability scanning across the development pipeline; import results into DISA STIG Viewer and eMASS.
• Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days).
• Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm.
• Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible.
• Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images.
• Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records
• Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy.
• Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak)
• Participate in two‑week Agile sprint cycles and contribute to release planning and demonstrations

Skills

DevSecOps

Cloud engineering

Information security

CI/CD pipelines

GitHub

Security automation

DoD STIGs

Agile

AWS GovCloud

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

GitHub

DISA STIG Viewer

eMASS

Iron Bank images

Job description

AtLucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.

Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Job Summary

We are looking for a DevSecOps / Cloud Engineer to support CI/CD pipeline automation, STIG compliance automation, and cloud migration for a federal government IT program supporting the U.S. Army Corps of Engineers (USACE), Walla Walla District. You will support the migration of legacy on-premises applications to the USACE CWBI Cloud environment while automating security scanning and remediation workflows across the development pipeline.

Key Responsibilities

• Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment
• Automate DoD STIG compliance checks and vulnerability scanning (ACAS/SCAP) across the development pipeline; import results into DISA STIG Viewer and eMASS
• Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days)
• Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm
• Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible
• Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images
• Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records
• Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy
• Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak)
• Participate in two‑week Agile sprint cycles and contribute to release planning and demonstrations

Required Qualifications

• Minimum active Tier 1 (or higher) federal background investigation, favorably adjudicated, prior to start
• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security
• Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub
• Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud
• Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline
• Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles

Preferred Qualifications

• Experience with microservices architecture and hardened/Iron Bank container images
• Federal government or DoD cloud/cybersecurity program background
• AWS certification (e.g., Solutions Architect, Security Specialty)
• Familiarity with data cataloging standards (Dublin Core, OpenAPI)

Certifications

• Active Tier 1+ background investigation prior to start
• CompTIA Security+ or DoD 8140-approved equivalent required within six (6) months of contract start
• (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) desired for senior/lead roles