Security Automation Engineer (Mid-Level)

Wiraa; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work environment

Professional development andcerts

Paid time off

Job summary

DecisionPoint is seeking a Mid-Level Security Automation Engineer to join our Cloud Services team. This role focuses on maintaining and enhancing the ARTRANS AWS GovCloud environments and DevSecOps platform, implementing security controls, IaC, and CI/CD integration.

You will collaborate with cross-functional teams to embed security into the development lifecycle, support RMF risk assessments, and drive continuous security and compliance across programs while enabling secure, scalable cloud

Qualifications

• Active Secret clearance required.
• Associate degree with at least 6 years of relevant experience, or 8 years of continuous related work experience in lieu of a degree.
• Possession of a DCWF 8140, IAT Level II certification, such as Security+ CE.
• Strong understanding of AWS GovCloud environments and security best practices.
• Demonstrated proficiency with Infrastructure as Code (IaC) tools including Terraform, Helm, and YAML.
• Experience with Kubernetes and container orchestration.
• Hands-on experience with AWS Security Hub and remediation of cloud-security findings.
• Knowledge of risk management frameworks, particularly NIST SP 800-53 Rev 5 and RMF processes.
• Ability to identify, analyze, and remediate security vulnerabilities and configuration drifts in cloud environments.
• Excellent problem-solving skills and the ability to recommend effective risk mitigation strategies.

Responsibilities

• Manage and optimize AWS GovCloud infrastructure utilizing Terraform, Helm, and YAML manifests for deployment and updates.
• Identify and remediate security findings within AWS Security Hub, ensuring compliance with security standards.
• Execute infrastructure changes through approved code repositories and CI/CD pipelines to maintain consistency and security.
• Develop and implement solutions for RMF risk assessments, including the creation of Plans of Action and Milestones (POA&M).
• Embed security controls within Infrastructure as Code (IaC) and Configuration as Code (CaC) workflows to automate security compliance.
• Assess existing security tools and platform features, recommending enhancements to support Zero Trust architecture and RMF security requirements.
• Detect and remediate configuration drifts across Terraform, Helm, Kubernetes, and AWS environments to maintain security posture.
• Collaborate with development and security teams to integrate security best practices into the DevSecOps pipeline.
• Continuously monitor cloud environments for security vulnerabilities and implement proactive measures to mitigate risks.

Skills

Terraform

Helm

YAML

Kubernetes

AWS GovCloud

SecurityHub

RMF

IaC

Education

Associate degree + 6 years experience or 8 years experience in lieu of a degree

Tools

Terraform

Helm

YAML

Kubernetes

Job description

About The Company

DecisionPoint is a leading provider of innovative technology solutions dedicated to delivering secure, reliable, and scalable cloud services to government and commercial clients. With a focus on cybersecurity, cloud infrastructure, and DevSecOps practices, DecisionPoint strives to enable organizations to achieve their mission objectives through cutting-edge technology and expert support. The company values integrity, collaboration, and continuous improvement, fostering an inclusive environment where talented professionals can thrive and make a meaningful impact in the realm of digital security and cloud computing.

About The Role

DecisionPoint is seeking a skilled Mid-Level Security Automation Engineer to join our Cloud Services (CS) team. This role is pivotal in maintaining and enhancing the ARTRANS AWS cloud environments and DevSecOps platform, ensuring they meet stringent security and compliance standards. The ideal candidate will be responsible for implementing, managing, and automating security controls within cloud infrastructure, with a focus on AWS GovCloud environments. You will work closely with cross‑functional teams to embed security into the development lifecycle, support risk assessments, and facilitate continuous security and compliance across multiple programs. This position offers the opportunity to work remotely, leveraging your expertise to safeguard critical government cloud environments while supporting innovative DevSecOps initiatives.

Qualifications

• Active Secret clearance is mandatory.
• An associate degree with at least 6 years of relevant experience, or 8 years of continuous related work experience in lieu of a degree.
• Possession of a DCWF 8140, IAT Level II certification, such as Security+ CE.
• Strong understanding of AWS GovCloud environments and security best practices.
• Demonstrated proficiency with Infrastructure as Code (IaC) tools including Terraform, Helm, and YAML.
• Experience with Kubernetes and container orchestration.
• Hands‑on experience with AWS Security Hub and remediation of cloud‑security findings.
• Knowledge of risk management frameworks, particularly NIST SP 800‑53 Rev 5 and RMF processes.
• Ability to identify, analyze, and remediate security vulnerabilities and configuration drifts in cloud environments.
• Excellent problem‑solving skills and the ability to recommend effective risk mitigation strategies.

Responsibilities

• Manage and optimize AWS GovCloud infrastructure utilizing Terraform, Helm, and YAML manifests for deployment and updates.
• Identify and remediate security findings within AWS Security Hub, ensuring compliance with security standards.
• Execute infrastructure changes through approved code repositories and CI/CD pipelines to maintain consistency and security.
• Develop and implement solutions for RMF risk assessments, including the creation of Plans of Action and Milestones (POA&Ms).
• Embed security controls within Infrastructure as Code (IaC) and Configuration as Code (CaC) workflows to automate security compliance.
• Assess existing security tools and platform features, recommending enhancements to support Zero Trust architecture and RMF security requirements.
• Detect and remediate configuration drifts across Terraform, Helm, Kubernetes, and AWS environments to maintain security posture.
• Collaborate with development and security teams to integrate security best practices into the DevSecOps pipeline.
• Continuously monitor cloud environments for security vulnerabilities and implement proactive measures to mitigate risks.

Benefits

• Competitive salary package commensurate with experience.
• Comprehensive health, dental, and vision insurance plans.
• Retirement plans with company contributions.
• Flexible work arrangements and fully remote work environment.
• Opportunities for professional development and certifications.
• Paid time off and holidays to promote work‑life balance.
• Inclusive and diverse workplace culture that values employee well‑being and growth.

Equal Opportunity

DecisionPoint Corporation is an Equal Employment Opportunity and Affinity Action employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected class under applicable laws. We believe in fostering an inclusive environment that respects and values diversity. Additionally, in accordance with Presidential Executive Order 13665, DecisionPoint will not discriminate against employees or applicants for discussing or inquiring about compensation information. We encourage all qualified candidates to apply and join our team in advancing secure cloud solutions for our clients.