Intermediate Automation / DevSecOps Engineer
- Doświadczenie
- od 3 lat
- Praktyki
- CI/CD, DevSecOps
- Przy aplikacji
- poświadczenie bezpieczeństwa
Position Overview: Intermediate Automation / DevSecOps Engineer responsible for automating the provisioning, hardening, deployment, and sustainment of Department of the Air Force applications hosted in the Cloud
One (AWS GovCloud) environment at DoD Impact Levels 4 through 6. Working with senior cloud engineers, the engineer builds and maintains Infrastructure as Code and DevSecOps pipelines, automates STIG compliance for operating systems, databases, and services, and supports core AWS compute, storage, networking, database, and identity services. This position keeps system documentation and architecture diagrams current and helps implement Zero Trust controls across the cloud environment.
Develop, test, and maintain Infrastructure as Code (e.g., Terraform or AWS CloudFormation) to provision and configure EC2, S3/EBS, VPC, RDS, and IAM resources in AWS GovCloud. Build, operate, and improve CI/CD and DevSecOps pipelines with integrated security scanning, approval gates, and automated application deployment. Automate STIG hardening of Windows Server and RHEL/Linux systems using Ansible, Chef, Puppet, or Group Policy.
Run SCAP Compliance Checker (SCC) scans, analyze the results, and remediate or document findings to maintain IL4/IL5/IL6 compliance. Configure Security Groups, NACLs, and IAM policies to enforce least privilege and Zero Trust within Cloud
One shared services and boundary protections. Deploy and maintain containerized applications and support Kubern