DevSecOps Engineer I with Security Clearance

Akima Infrastructure Services; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

Pinnacle Solutions, an Akima company, is seeking a DevSecOps Engineer to bridge our cloud infrastructure, on-prem training environments, and cybersecurity operations. You will own systems administration tasks from Active Directory to endpoint security, while advancing AWS cloud initiatives and local classroom setups.

The role requires translating security frameworks into actionable controls, hardening systems, and maintaining compliance with federal mandates across all environments.

Qualifications

• Bachelor's degree required; security-focused experience preferred.
• CompTIA Security+ certification required.
• U.S. citizenship and ability to obtain Secret clearance.

Responsibilities

• Secure cloud and on-prem infrastructure while maintaining classroom labs.
• Manage Active Directory and enterprise MDM.
• Provision and secure local training hardware and endpoints across environments.
• Translate security frameworks into actionable technical controls for compliance.

Skills

DevSecOps

Cloud security

Active Directory

MDM

Vulnerability management

Education

Bachelor's degree

Tools

ACAS

DISA STIG

AWS

NIST SP 800-171

NIST SP 800-53

Job description

We are looking for a DevSecOps Engineer to bridge the gap between our cloud infrastructure, on-premise training environments, and our cybersecurity operations. This role focuses heavily on maintaining both functionality and security across our technical environments, spanning from backend servers and AWS cloud initiatives to localized physical classroom setups and end-user devices. The position takes ownership of general systems administration, including daily Active Directory management, enterprise mobile device management (MDM), and the deployment of physical training hardware, while simultaneously driving our AWS cloud initiatives forward. Because the organization operates in a highly regulated space, a major part of the job involves translating complex security frameworks into actionable technical controls. The ultimate goal of this position is to keep our systems resilient, hardened, and fully compliant with federal security mandates across all infrastructure whether cloud-hosted or locally deployed in closed networks.

• This includes provisioning EC2 instances, setting up subnets, and building automated deployment pipelines. * In addition to cloud environments, this engineer will physically and logically support local classroom setups, maintaining on-premises hardware and ensuring localized training systems are operational and secure. * This work is paired with managing the Active Directory environment, handling general user and computer management, and establishing integrations between our identity systems and the AWS cloud. * Additionally, this engineer will oversee our mobile device management (MDM) platform, ensuring that all ERDs, tablets, and remote endpoints are properly enrolled, monitored, and secured with configuration policies.
• Beyond infrastructure and endpoints, active defense and vulnerability management are critical day-to-day tasks. * The engineer is responsible for hardening EC2 instances, the broader cloud architecture, local classroom workstations, and all managed mobile devices against potential threats. * This includes routinely running ACAS and DISA STIG scans, analyzing the results, and taking the initiative to patch, fix, and remediate any vulnerabilities found during those scans across cloud, physical servers, and mobile platforms. * Finally, the role requires drafting, managing, and updating critical system documentation directly mapped to NIST SP 800-171 and NIST SP 800-53 standards, ensuring all regulatory and audit obligations are consistently met.
• The successful candidate must have direct experience using vulnerability assessment tools like ACAS and applying DISA STIGs to secure operating systems, network infrastructure, and mobile endpoints. * It is not enough to just identify vulnerabilities; candidates need a strong operational track record of engineering solutions, applying patches, enforcing endpoint policies, and successfully fixing those findings across both cloud and physical infrastructure. * Finally, to meet the baseline compliance standards for this position, applicants must hold at least a Bachelor's degree as well as an active CompTIA Security+ certification. * Must be a US citizen capable of obtaining and maintaining a Secret Security clearance.

Job ID 2026-24936
Work Type On-Site
Company Description
Work Where it Matters Pinnacle Solutions, an Akima company, is not just another federal contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. At Pinnacle Solutions, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. For our shareholders, Pinnacle Solutions provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. For our government customers, Pinnacle Solutions delivers comprehensive services for general construction and renovation, as well as civil and marine construction. As a Pinnacle Solutions employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.