Secret Automation Engineer

Insight Global; Fairfax (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Insight Global is seeking an experienced Automation Engineer to join a hybrid AWS GovCloud, Azure Government, and on-prem environment. You will build, test, and maintain automation for infrastructure, compliance, and delivery pipelines using Python, Terraform, and GitHub workflows.

You will drive security compliance with STIG/CKL, support DoD RMF guidance, and collaborate with cybersecurity, operations, and program stakeholders to deliver auditable, scalable automation solutions.

Qualifications

• Active Secret or higher security clearance required.
• Bachelor's degree in Computer Science, Information Systems, Engineering or related field.
• 5+ years in systems engineering, DevOps, SRE or automation engineering.
• Strong Python for automation, YAML/JSON/CSV processing, REST APIs.
• Terraform experience with remote state and modules in AWS/Azure Gov.
• Knowledge of DoD cybersecurity requirements and STIG/CKL tooling.

Responsibilities

• Automate patching, STIG hardening, config validation, and drift remediation.
• Develop Python tools to automate compliance workflows and reporting.
• Design and maintain Terraform modules for GovCloud and Gov Azure.
• Version-control existing infrastructure and enable IaC management.
• Integrate data exchange via JSON/YAML/CSV with Jira, Splunk, NetBox, Infoblox.
• Build GitHub workflows and CI/CD pipelines with code review and tests.
• Incorporate security scanning into delivery workflows and address findings.
• Work with Jira-based Agile backlog and participate in ceremonies.
• Coordinate with stakeholders to meet mission, security, and ops requirements.

Skills

Python automation

Terraform

Git/GitHub workflows

Windows & Linux admin

DoD compliance knowledge

STIG/CKL expertise

CI/CD pipelines

Cloud: AWS GovCloud / Azure Gov

Ansible automation

Docker/Kubernetes

Education

Bachelor's degree in CS/Info Systems/Engineering

Tools

Terraform (modules)

GitHub Actions

Splunk

NetBox/Infoblox

Puppet/Ansible

Job description

Job Description

Insight Global is seeking an experienced, mission-focused Automation Engineer to join an engineering team responsible for a hybrid environment spanning Amazon Web Services (AWS) GovCloud, Microsoft Azure Government, and on-premises data center infrastructure. The Automation Engineer will design, build, and maintain the program's automation capabilities, including infrastructure as code, configuration management, compliance workflow automation, and GitHub-based delivery pipelines. This role will reduce manual effort, improve consistency, and ensure that infrastructure and compliance changes are reviewed, versioned, tested, repeatable, and auditable in accordance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) guidelines.

Primary Responsibilities

• Automate patch orchestration, DISA STIG hardening, configuration validation, and drift remediation for Windows and Linux systems.
• Develop Python tools that automate operational and cybersecurity compliance workflows, including parsing and generating STIG Checklist (CKL) files; consuming ACAS and Nessus exports; tracking IAVM and POA&M status; and producing scheduled reports and dashboards.
• Design, develop, and maintain reusable Terraform modules for AWS GovCloud and Azure Government compute, networking, identity and access management, storage, and monitoring resources.
• Bring existing manually provisioned infrastructure under version control and infrastructure-as-code management without disrupting production operations.
• Use JSON, YAML, CSV, and REST application programming interfaces (API) to exchange data and integrate platforms in the environment, including Jira, Splunk, NetBox, Infoblox, NetApp ONTAP, Active Directory, and cloud-provider services.
• Replace manual runbook steps with idempotent, logged, testable, and auditable automation that supports CCB review and cybersecurity evidence requirements.
• Develop and maintain GitHub workflows and continuous integration and continuous delivery (CI/CD) pipelines that enforce branching, pull-request, code-review, testing, and release controls.
• Incorporate infrastructure-as-code, configuration, and application security scanning into automated delivery workflows and address identified findings.
• Work from the team backlog in Jira under an Agile/Scrum delivery cadence; participate in asynchronous standups, sprint planning, backlog refinement, reviews, and demonstrations.
• Coordinate with engineering, cybersecurity, operations, and program stakeholders to prioritize automation opportunities and ensure solutions meet mission, security, and operational requirements.

Skills and Requirements

• Active Secret or higher security clearance.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field of study, or an equivalent combination of education and hands-on experience.
• 5+ years of professional experience in systems engineering, DevOps, site reliability engineering, or automation engineering roles.
• Strong hands-on Python development experience for automation and integration, including JSON, YAML, and CSV data processing; REST API integration; error handling; logging; and unit testing.
• Production experience with Terraform, including reusable modules, remote state, workspaces, and AWS and/or Azure providers.
• Proficiency with Git and GitHub workflows.
• Working knowledge of Windows Server and Linux administration, Active Directory, and enterprise networking fundamentals.
• Working knowledge of DoD cybersecurity compliance requirements and processes.
• Ability to work onsite as required by the program.
• Experience supporting AWS GovCloud and/or Azure Government, including Government Community Cloud High (GCC High), Impact Level 4 or 5 workloads, and FedRAMP High considerations.
• PowerShell development experience for Windows automation in conjunction with Python.
• Experience with infrastructure-as-code and configuration security scanning tools such as Checkov, tfsec, ansible-lint, and static application security testing (SAST) platforms.
• Experience automating STIG compliance at scale using CKL generation and parsing, Evaluate-STIG, Security Content Automation Protocol (SCAP), or Ansible STIG roles, including production of Enterprise Mission Assurance Support Service (eMASS)-ready evidence.
• Experience integrating and automating Splunk, Nagios, NetBox, Infoblox, NetApp ONTAP, or similar enterprise platforms.
• Experience with Docker, Kubernetes, or other container and orchestration technologies.
• Experience with cloud-native automation services such as AWS Systems Manager or Azure Automation.
• Experience using large language model APIs or agentic automation platforms, including Amazon Bedrock or Azure OpenAI, for operational tooling.
• Current certifications such as HashiCorp Terraform Associate, Red Hat Ansible Automation, AWS or Azure Solutions Architect, or DoD 8140-aligned certifications such as Security+ or higher.
• Prior experience supporting DoD or other Federal programs under Agile delivery and CCB-controlled change processes.
• Production experience with Ansible, including playbooks, roles, inventories, vault, and management of Windows and Linux targets.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].