DevSecOps Engineer - Cloud Security & ATO Automation

Wilcore Technologies, Inc.; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Wilcore Technologies, Inc. is seeking a hands-on DevSecOps Engineer to strengthen cloud security, automate secure development, and manage POA&Ms for a pivotal federal program.

You will integrate security controls across the SDLC, maintain IaC with CloudFormation, and lead remediation efforts with engineers and stakeholders. You will help achieve and sustain an Authorization to Operate (ATO) while applying Zero Trust principles and modern DevSecOps practices in AWS environments.

Qualifications

• Hands-on DevSecOps experience with secure CI/CD pipelines.
• Experience with AWS CloudFormation and AWS services (ECS, S3, RDS, Lambda).
• Ability to translate security findings into engineering tasks and remediation actions.
• Experience developing vulnerability-patching and remediation plans.
• Experience supporting POA&Ms and remediation milestones.
• Familiarity with Security Impact Assessments and ATO activities.
• Knowledge of Zero Trust in cloud environments and secure DevOps practices.
• Experience working in Agile software development environments.

Responsibilities

• Design, implement, maintain, and document secure CI/CD pipelines.
• Develop and maintain Infrastructure as Code (IaC) using AWS CloudFormation.
• Build, configure, secure, and support AWS environments and serverless services.
• Integrate security controls, vulnerability scanning, and automated compliance checks throughout the SDLC.
• Establish remediation plans and work with engineers to resolve findings.
• Develop and execute POA&Ms with milestones and owners.
• Maintain real-time dashboards for security findings, POA&Ms, and remediation status.
• Support and conduct Security Impact Assessments and ATO activities.

Skills

CI/CD pipelines

GitHub Actions

AWS CloudFormation

ECS

S3

RDS

Lambda

Zero Trust

Vulnerability remediation

POA&Ms management

Security assessments

Linux environments

Container security

Tools

Docker

Job description

Wilcore Technologies, Inc. is seeking a hands-on DevSecOps Engineer to strengthen cloud security, automate secure development, and manage POA&Ms for a pivotal federal program.

You will integrate security controls across the SDLC, maintain IaC with CloudFormation, and lead remediation efforts with engineers and stakeholders. You will help achieve and sustain an Authorization to Operate (ATO) while applying Zero Trust principles and modern DevSecOps practices in AWS environments.