Intermediate Automation / DevSecOps Engineer

Ddc Dine; Virginia; In loco; USD 110.000 - 128.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, dental, vision

Retirement with company match

Paid time off

Descrizione del lavoro

Diné Development Corporation (DDC) seeks an Intermediate Automation / DevSecOps Engineer to automate provisioning, hardening, and deployment of DoD cloud workloads in AWS GovCloud. You will build IaC, CI/CD pipelines, and enforce STIGs while supporting IL4–IL6 requirements.

Work with senior cloud engineers to implement zero-trust controls, monitor resources, and maintain documentation. Requires 3+ years in GovFed cloud, active TS clearance, and DoD 8140/Security+ and cloud certifications;

Competenze

• 3+ years of specialized cloud administration in Federal/DoD environments with GovCloud
• Active Top Secret clearance required
• DoD 8140: CompTIA Security+ CE or higher; AWS Solutions Architect Associate or higher; CKA; Terraform Associate preferred
• Experience applying DISA STIGs to Windows Server and RHEL/Linux using automation
• Proficiency with core AWS services (EC2, S3, VPC, RDS, IAM) and configuring Security Groups/NACLs for Zero Trust

Mansioni

• Develop, test, and maintain IaC (Terraform or CloudFormation) to provision AWS GovCloud resources
• Build and improve CI/CD and DevSecOps pipelines with integrated security checks
• Automate STIG hardening of Windows Server and Linux systems
• Run and remediate SCAP scans to maintain IL4/IL5/IL6 compliance
• Configure network security to enforce least privilege and Zero Trust
• Maintain Runbooks and architecture diagrams; support patching and health checks
• Support Kubernetes workloads and containerized apps where applicable

Conoscenze

GovCloud admin

CI/CD pipelines

Infrastructure as Code

Python scripting

Zero Trust

Formazione

High school diploma or GED

Strumenti

Terraform

AWS CloudFormation

Ansible

Puppet

Group Policy

SCAP

Kubernetes

Descrizione del lavoro

## Intermediate Automation / DevSecOps EngineerApply: Quantico, VA: Full time: Posted Today: JR100471* **Position Overview: Intermediate Automation / DevSecOps Engineer** responsible for automating the provisioning, hardening, deployment, and sustainment of Department of the Air Force applications hosted in the CloudOne (AWS GovCloud) environment at DoD Impact Levels 4 through 6. Working with senior cloud engineers, the engineer builds and maintains Infrastructure as Code and DevSecOps pipelines, automates STIG compliance for operating systems, databases, and services, and supports core AWS compute, storage, networking, database, and identity services. This position keeps system documentation and architecture diagrams current and helps implement Zero Trust controls across the cloud environment.* **Responsibilities:*** Develop, test, and maintain Infrastructure as Code (e.g., Terraform or AWS CloudFormation) to provision and configure EC2, S3/EBS, VPC, RDS, and IAM resources in AWS GovCloud.* Build, operate, and improve CI/CD and DevSecOps pipelines with integrated security scanning, approval gates, and automated application deployment.* Automate STIG hardening of Windows Server and RHEL/Linux systems using Ansible, Chef, Puppet, or Group Policy.* Run SCAP Compliance Checker (SCC) scans, analyze the results, and remediate or document findings to maintain IL4/IL5/IL6 compliance.* Configure Security Groups, NACLs, and IAM policies to enforce least privilege and Zero Trust within CloudOne shared services and boundary protections.* Deploy and maintain containerized applications and support Kubernetes workloads where applicable.* Automate patching, configuration drift detection, health checks, and routine operational tasks using scripting languages such as Python, PowerShell, or Bash.* Implement and validate FIPS 140-2 compliant encryption for data at rest and in transit.* Monitor cloud resources, logs, and pipeline status, and troubleshoot deployment, performance, and availability issues.* Implement approved changes through the configuration and change management process and update configuration baselines.* Maintain current system documentation, runbooks, and architecture diagrams, and provide input to monthly cloud status reporting.* **Years of Experience:*** At least 3 years of specialized experience in cloud administration within Federal/Department of War (DoW) environments, with specific expertise in GovCloud offerings (e.g., AWS, Microsoft Azure, Google Cloud, and/or VMware vSphere).* Education Level: High school diploma or GED equivalent.* **Clearance Requirements: Must possess and maintain an active Top Secret (TS) security clearance.*** **Certification Requirements: DoD 8140: CompTIA Security+ CE or a higher-level certification** (e.g., CompTIA SecurityX, formerly CASP+, or CISSP) required. AWS Certified Solutions Architect – Associate (or higher), Certified Kubernetes Administrator (CKA), or HashiCorp Certified: Terraform Associate preferred.* Any other work-related qualifications needed for the role: Proficiency managing core AWS services (EC2, S3, VPC, RDS, and IAM) and configuring Security Groups and NACLs to implement Zero Trust architectures; familiarity with CloudOne shared services, boundary protections, and ingress/egress patterns; experience applying DISA STIGs to Windows Server and RHEL/Linux using Group Policy or automation tools and remediating SCAP Compliance Checker findings; knowledge of FIPS 140-2 encryption standards; and proficiency with Infrastructure as Code, automation, and scripting. Salary Range: $110,000 to $128,000The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements. **About Us**Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.**Benefits**Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.**Equal Opportunity & Compliance Statement**This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.We participate in E-Verify.DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance [e-mail]