Security Automation Engineer - Cloud & DevSecOps (Remote)

Wiraa; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work environment

Professional development andcerts

Paid time off

Job summary

DecisionPoint is seeking a Mid-Level Security Automation Engineer to join our Cloud Services team. This role focuses on maintaining and enhancing the ARTRANS AWS GovCloud environments and DevSecOps platform, implementing security controls, IaC, and CI/CD integration.

You will collaborate with cross-functional teams to embed security into the development lifecycle, support RMF risk assessments, and drive continuous security and compliance across programs while enabling secure, scalable cloud

Qualifications

• Active Secret clearance required.
• Associate degree with at least 6 years of relevant experience, or 8 years of continuous related work experience in lieu of a degree.
• Possession of a DCWF 8140, IAT Level II certification, such as Security+ CE.
• Strong understanding of AWS GovCloud environments and security best practices.
• Demonstrated proficiency with Infrastructure as Code (IaC) tools including Terraform, Helm, and YAML.
• Experience with Kubernetes and container orchestration.
• Hands-on experience with AWS Security Hub and remediation of cloud-security findings.
• Knowledge of risk management frameworks, particularly NIST SP 800-53 Rev 5 and RMF processes.
• Ability to identify, analyze, and remediate security vulnerabilities and configuration drifts in cloud environments.
• Excellent problem-solving skills and the ability to recommend effective risk mitigation strategies.

Responsibilities

• Manage and optimize AWS GovCloud infrastructure utilizing Terraform, Helm, and YAML manifests for deployment and updates.
• Identify and remediate security findings within AWS Security Hub, ensuring compliance with security standards.
• Execute infrastructure changes through approved code repositories and CI/CD pipelines to maintain consistency and security.
• Develop and implement solutions for RMF risk assessments, including the creation of Plans of Action and Milestones (POA&M).
• Embed security controls within Infrastructure as Code (IaC) and Configuration as Code (CaC) workflows to automate security compliance.
• Assess existing security tools and platform features, recommending enhancements to support Zero Trust architecture and RMF security requirements.
• Detect and remediate configuration drifts across Terraform, Helm, Kubernetes, and AWS environments to maintain security posture.
• Collaborate with development and security teams to integrate security best practices into the DevSecOps pipeline.
• Continuously monitor cloud environments for security vulnerabilities and implement proactive measures to mitigate risks.

Skills

Terraform

Helm

YAML

Kubernetes

AWS GovCloud

SecurityHub

RMF

IaC

Education

Associate degree + 6 years experience or 8 years experience in lieu of a degree

Tools

Terraform

Helm

YAML

Kubernetes

Job description

DecisionPoint is seeking a Mid-Level Security Automation Engineer to join our Cloud Services team. This role focuses on maintaining and enhancing the ARTRANS AWS GovCloud environments and DevSecOps platform, implementing security controls, IaC, and CI/CD integration.

You will collaborate with cross-functional teams to embed security into the development lifecycle, support RMF risk assessments, and drive continuous security and compliance across programs while enabling secure, scalable cloud