Intermediate Automation / DevSecOps Engineer

Ailani Hawaiian, LLC; Triangle (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Ailani Wind Joint Venture is seeking an Intermediate Automation / DevSecOps Engineer to engineer, administer, automate, and sustain Cloud One AWS GovCloud infrastructure at IL4, IL5, and IL6. The engineer provisions secure cloud services and supports application deployment through infrastructure-as-code and DevSecOps practices.

This position integrates security hardening, Zero Trust controls, automation, monitoring, and configuration management into repeatable cloud operations while maintaining

Qualifications

• Hands-on knowledge of AWS GovCloud, Cloud One, EC2, S3/EBS, RDS, VPC, IAM, Security Groups, and network ACLs.
• Experience implementing infrastructure as code, configuration automation, scripting, and CI/CD or DevSecOps pipelines.
• Knowledge of Windows and RHEL security hardening, STIG implementation, SCC validation, FIPS, and Zero Trust principles.
• Working knowledge of containers and Kubernetes-based application environments.
• Ability to troubleshoot complex cloud-service, identity, network, pipeline, and deployment issues.
• Ability to produce accurate technical documentation and operate within formal configuration- and change-management processes.

Responsibilities

• Provision, configure, administer, monitor, and sustain AWS GovCloud and Cloud One infrastructure and services.
• Manage EC2, S3, EBS, RDS, VPC, IAM, Security Groups, network ACLs, and related AWS services.
• Develop, maintain, test, and deploy infrastructure-as-code templates, scripts, modules, and reusable automation.
• Build and support DevSecOps pipelines used to deploy applications, configurations, and infrastructure changes.
• Automate repeatable administration, compliance, monitoring, deployment, backup, and reporting activities.
• Implement and validate Windows and RHEL STIGs, FIPS requirements, Secure Configuration Compliance checks, and approved security baselines.
• Configure Cloud One boundary services and Zero Trust controls in coordination with network and cybersecurity teams.
• Deploy and sustain containerized workloads and Kubernetes services when applicable to the approved architecture.
• Monitor availability, performance, capacity, logs, costs, and security events and correct or escalating identified conditions.
• Troubleshoot cloud, automation, pipeline, application-deployment, identity, storage, and connectivity issues.
• Maintain cloud architecture diagrams, inventories, build records, code repositories, runbooks, test results, and change documentation.

Skills

AWS GovCloud

Cloud One

DevSecOps

CI/CD pipelines

Scripting

Security hardening

Zero Trust

Kubernetes

Terraform

Documentation

Education

High school diploma or GED

Tools

Terraform

AWS CloudFormation

Ansible

Git

Kubernetes

Job description

Description

Position Description:

Ailani Wind Joint Venture is seeking an Intermediate Automation / DevSecOps Engineer to engineer, administer, automate, and sustain Cloud One AWS GovCloud infrastructure at IL4, IL5, and IL6. The engineer provisions secure cloud services and supports application deployment through infrastructure-as-code and DevSecOps practices.

This position integrates security hardening, Zero Trust controls, automation, monitoring, and configuration management into repeatable cloud operations while maintaining complete architecture and system documentation.

Primary Responsibilities:

Typical Responsibilities/Tasks:

• Provision, configure, administer, monitor, and sustain AWS GovCloud and Cloud One infrastructure and services.
• Manage EC2, S3, EBS, RDS, VPC, IAM, Security Groups, network ACLs, and related AWS services.
• Develop, maintain, test, and deploy infrastructure-as-code templates, scripts, modules, and reusable automation.
• Build and support DevSecOps pipelines used to deploy applications, configurations, and infrastructure changes.
• Automate repeatable administration, compliance, monitoring, deployment, backup, and reporting activities.
• Implement and validate Windows and RHEL STIGs, FIPS requirements, Secure Configuration Compliance checks, and approved security baselines.
• Configure Cloud One boundary services and Zero Trust controls in coordination with network and cybersecurity teams.
• Deploy and sustain containerized workloads and Kubernetes services when applicable to the approved architecture.
• Monitor availability, performance, capacity, logs, costs, and security events and correct or escalating identified conditions.
• Troubleshoot cloud, automation, pipeline, application-deployment, identity, storage, and connectivity issues.
• Maintain cloud architecture diagrams, inventories, build records, code repositories, runbooks, test results, and change documentation.

Requirements

Required Qualifications:

• Hands-on knowledge of AWS GovCloud, Cloud One, EC2, S3/EBS, RDS, VPC, IAM, Security Groups, and network ACLs.
• Experience implementing infrastructure as code, configuration automation, scripting, and CI/CD or DevSecOps pipelines.
• Knowledge of Windows and RHEL security hardening, STIG implementation, SCC validation, FIPS, and Zero Trust principles.
• Working knowledge of containers and Kubernetes-based application environments.
• Ability to troubleshoot complex cloud-service, identity, network, pipeline, and deployment issues.
• Ability to produce accurate technical documentation and operate within formal configuration- and change-management processes.

Required Clearance:

Active Secret

Certifications:

Security+ CE or higher (for example, CASP+ CE or CISSP)

Required Education:

High school diploma or GED.

Required Experience:

Minimum of three (3) years of specialized cloud administration experience in Federal or DoW environments, including hands-on work in AWS GovCloud or Cloud One.

Desired Qualifications

• AWS Certified Solutions Architect, SysOps Administrator, or DevOps Engineer certification.
• Experience with Terraform, AWS CloudFormation, Ansible, or comparable infrastructure automation tools.
• Experience with Git-based workflows, automated testing, artifact repositories, and container security.
• Experience supporting DAF Cloud One workloads at IL4, IL5, or IL6.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.