DevSecOps / Cloud Systems Engineer (Intermediate)

KC; Johnstown (AL); On-site; USD 115,000 - 120,000; Full time

Job summary

Karthik Consulting is seeking an experienced DevSecOps Cloud Systems Engineer (Intermediate) to support DAFOS delivery pipelines and Cloud One AWS operations from near Gunter Annex, Alabama. The role emphasizes automation, monitoring, and secure deployments within a government context.

The position requires a Secret clearance, on-site reporting within two hours for critical issues, and proximity to the specified location. Salary is $115k–$120k, contingent on award and qualifications.

Qualifications

• Current, fully adjudicated Secret clearance
• Experience with CI/CD pipelines, Linux systems, and cloud-hosted applications
• Ability to obtain SIPRNet access; work in Government-furnished environments
• Willingness to report on-site within two hours for critical troubleshooting
• Proximity to Gunter Annex, Alabama, within the required reporting radius

Responsibilities

• Maintain GitLab or Jenkins pipeline jobs for builds, tests, security scans, packaging, deployments
• Implement and version-control Terraform, Ansible, YAML, and other configuration scripts
• Build and maintain Docker images and deployment artifacts
• Support AWS networking, compute, container, storage, and monitoring services
• Administer and patch RHEL systems; ensure access controls and baselines
• Monitor logs, failures, and alerts; collaborate with developers and QA
• Run SAST/DAST scans; document and remediate findings
• Update SBOMs, manage dependencies, enforce least privilege and zero-trust controls
• Execute backups and recovery tests; maintain evidence
• Support deployment planning, IaC delivery, STIG artifacts, and releases

Skills

CI/CD pipelines

Linux systems

Cloud services

Git

Scripting

Infrastructure as code

Containers

Configuration automation

Education

Bachelor's degree or higher in IT/CS/Engineering/Cybersecurity

Tools

Terraform

Ansible

Docker

YAML

Red Hat Enterprise Linux

AWS

Job description

Position Summary

The DevSecOps Cloud Systems Engineer (Intermediate Level) supports DAFOS delivery pipelines, infrastructure configuration, and Cloud One AWS operations under senior technical direction. The role implements automation, monitors environments, resolves deployment issues, and maintains security and recovery evidence. The position requires a primary residence within 60 miles of Gunter Annex, Alabama, and the ability to report on-site within two hours of notification for critical troubleshooting. This position is contingent based on award, with an anticipated salary range of $115,000-$120,000 based on candidate qualifications and final contract requirements.

Work Environment

• Work Location: Gunter Annex, AL. On-site
• Security Clearance: Active Secret
• Salary: $115K-$120K

Compensation

Karthik Consulting is committed to providing competitive compensation based on the responsibilities of the role, required qualifications, security clearance level, relevant experience, certifications, customer requirements, geographic location, and overall business needs. The salary range listed for this position represents a good-faith estimate of the current compensation range for this role.

At Karthik Consulting, it is not typical for an individual to be hired at or near the top of the salary range. Final compensation decisions are based on the facts and circumstances of each candidate’s experience, qualifications, certifications, clearance level, contract requirements, and overall alignment with the role.

Employees may be eligible for company benefits and additional compensation programs, subject to company policy, contract requirements, and individual eligibility.

Program Scope and Description

The Global Force Management Data Initiative supports the Department of the Air Force Organizational Server (DAFOS). DAFOS validates authoritative Air Force data and publishes standardized unit, billet, crew, platform, vehicle, and command relationship information for Joint Staff war and contingency planning across past, present, and future timeframes.

The effort modernizes and sustains DAFOS in Air Force Cloud One AWS. Services include full-stack software development, testing, DevSecOps, cloud administration, database engineering, Agile facilitation, and approved automation. Optional capabilities augment technical documentation and Agile program support when activated by the Government.

Key Responsibilities

Pipeline and Infrastructure Support

• Maintain approved GitLab or Jenkins pipeline jobs for builds, automated tests, security scans, packaging, and deployments.
• Implement and version-control Terraform, Ansible, YAML, and other approved configuration scripts across program environments.
• Build and maintain Docker images and deployment artifacts, and publish required outputs to Government-designated repositories.

Cloud Systems Administration

• Support AWS networking, compute, container, storage, and monitoring services used by the program, including environment configuration and health checks.
• Administer and patch Red Hat Enterprise Linux systems and maintain approved access, configuration baselines, and operational procedures.
• Monitor logs, pipeline failures, and system alerts; troubleshoot issues with developers, the QA lead, and the senior cloud engineer.

Security and Recovery

• Run and maintain SAST, DAST, open source, and container scans; document results and help remediate assigned findings.
• Update SBOMs and dependency records, protect secrets, and support least-privilege and zero trust controls in approved environments.
• Execute automated backups and recovery tests for tools and configurations; maintain evidence and elevate failed recovery or security checks.

Deployment and Operational Support

• Support installation plans, IaC delivery, STIG artifacts, infrastructure scanning, and release checkout in staging and production.
• Respond to critical issues and report on-site within the required two-hour window; assist with post-production problem resolution.
• Document repeatable procedures and configuration changes, participate in Agile planning, and contribute operational data for program metrics and release reporting.

Qualifications

Education

Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field preferred. Equivalent relevant cloud systems and automation experience may be considered.

Professional Certifications

• Preferred: AWS SysOps Administrator, AWS Solutions Architect, Terraform Associate, Linux, or comparable cloud systems certification.
• Preferred: Security+ or a relevant cybersecurity certification; satisfy Government-assigned privileged-access qualifications before exercising those privileges.

Minimum Qualifications

• Current, fully adjudicated Secret clearance before contract performance; maintain clearance throughout assignment. Interim clearances are not accepted.
• Ability to obtain and maintain required SIPRNet and role‑appropriate privileged access. Work requiring SIPRNet access must be performed at an authorized Government facility.
• Experience supporting CI/CD pipelines, Linux systems, and cloud-hosted applications.
• Working proficiency with Git, scripting, infrastructure as code, containers, and configuration automation.
• Ability to operate AWS services, investigate logs and alerts, and troubleshoot build or deployment failures.
• Experience supporting patching, access controls, security scanning, backups, and recovery procedures.
• Primary residence within a 60-mile radius of Gunter Annex, Alabama, with the ability to report on-site within two hours of notification to troubleshoot critical issues.
• Perform technical work exclusively in Government-furnished environments and use only Government-approved communication systems; protect classified and controlled information.
• Ability to support the agreed work schedule, Government-directed core hours, occasional support outside normal hours, and approved travel as mission needs require.

Preferred Qualifications

• Experience with Cloud One, GitLab, Jenkins, Terraform, Ansible, Docker, YAML, and Red Hat Enterprise Linux.
• Experience with AWS VPC, ALB, EC2, ECS Fargate, CloudWatch, RDS, S3, Keycloak, and approved bastion services.
• Familiarity with STIGs, RMF evidence, SBOM management, and classified environment support.