DevOps Engineer (Mid) TS/SCI

Purpose and Impact Amentum is searching for a DevOps Engineer to join our team in Arlington, VA. You will be working in support of a DoW Special Programs customer developing a new application in AWS GovCloud. The mission is to modernize and sustain a secure, web-based platform that consolidates critical government workflows, enabling automated data management, role-based access control, and multi-level security capabilities in support of national security operations. The DevOps Engineer is responsible for owning the full platform lifecycle (infrastructure-as-code, CI/CD pipeline operations, environment stability, security posture, and incident response). You will deploy and configure services using AWS-native tooling, enforce change control discipline, and ensure the platform meets DoD IL4/IL5 compliance requirements at all times. Work Schedule Work is typically performed, Monday through Friday 8-hour days onsite. Flexibility within a 2-week pay period to reach 80 hours. Essential Responsibilities Design, deploy, operate, patch, and maintain AWS GovCloud infrastructure supporting a production web application. Own all Infrastructure-as-Code using CloudFormation and CDK with disciplined version-controlled change management (no manual console modifications in production). Build and maintain end-to-end CI/CD pipelines covering build, test, artifact promotion, deployment approvals, and release documentation. Implement and maintain private networking patterns including VPC segmentation, PrivateLink, and deny-by-default egress controls. Enforce least-privilege access across all environment components and support NIPR/SIPR connectivity requirements as applicable. Integrate security practices throughout the DevOps pipeline, automating security testing, scanning, and compliance checks. Implement automated security controls such as static code analysis, dynamic application security testing, container scanning, and vulnerability assessment. Establish and maintain continuous monitoring of application and infrastructure security. Coordinate with the Information Systems Security Engineer on ATO evidence collection, POA&M inputs, and continuous monitoring obligations. Respond to incidents, conduct root cause analysis, and implement corrective actions with full documentation. Maintain complete operational documentation including architecture diagrams, runbooks, and SOPs. Operate with appreciable latitude in developing methodology and presenting solutions to problems. Contribute to program deliverables and performance metrics where applicable. Minimum Requirements (Knowledge, Skills, and Abilities) Minimum of 5 years of experience collectively with the following: Operate and manage production workloads in AWS GovCloud or equivalent FedRAMP High / DoD IL4/IL5 regulated environment. Build and maintain Infrastructure-as-Code using CloudFormation and/or CDK with auditable change control. Design and operate CI/CD pipelines with artifact management, deployment approvals, and rollback procedures. Implement private networking (VPC design, endpoints, PrivateLink, and egress restriction patterns). Integrate security practices, tools, and measures into the full DevOps pipeline. Automate security testing, scanning, and compliance checks throughout the development lifecycle. Implement automated security controls including static code analysis, DAST, container scanning, and vulnerability assessment. Establish mechanisms for continuous monitoring of application and infrastructure security. Mid-level experience with Python or other scripting languages with a focus on automating operational tasks. Experience working in an agile development environment. Security Clearance Required: TS/SCI with an active DoD TS/SCI security clearance adjudicated in the last 5 years or designated CE and the ability to obtain and maintain special accesses. Minimum Education Bachelor’s degree in Information Systems Engineering, Computer Science, Engineering, Business, or other related fields. In absence of a degree, additional years of experience may be substituted. Minimum Years of Experience 5-8 Years Required. Required Certifications AWS Solutions Architect – Associate (minimum). Professional preferred. AWS SysOps Administrator - Associate or AWS DevOps Engineer - Professional. Security+ CE. Preferred Certifications AWS Security- Specialty. ITIL Foundation. Preferred Qualifications Experience supporting a DoW ATO or FedRAMP authorization process. Familiarity with DISA STIG compliance requirements and implementation. Experience operating PostgreSQL on Amazon RDS, including patching coordination and backup/restore validation. Experience with Keycloak or equivalent OIDC/SAML identity provider integration in a GovCloud environment. AWS Security‑Specialty certification. Git, GitLab, Terraform, Splunk, HashiCorp Vault, JIRA, Jenkins, Ansible, Amazon Web Services GovCloud, Microsoft Windows Server and Linux experience. Compensation $130,000 - $145,000. Benefits Health, dental, and vision insurance. Paid time off and holidays. Retirement benefits (401(k) matching). Educational reimbursement. Parental leave. Employee stock purchase plan. Tax‑saving options. Disability and life insurance. Pet insurance. EEO Statement Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. #J-18808-Ljbffr