Cloud DevSecOps Engineer

Job Description

Job Description

SIG is seeking a Cloud DevSecOps Engineer to design, provision, secure, and maintain cloud infrastructure in support of government client engagements. The successful candidate will bring hands-on AWS expertise, strong Infrastructure-as-Code skills using Terraform and Ansible, and experience with CloudBolt for hybrid cloud provisioning and governance. This role sits at the intersection of cloud engineering and DevSecOps, requiring both the ability to build automated, secure, and scalable infrastructure and the scripting/coding depth to integrate and extend tooling across the environment.SIG is a fast growing 8(a) government contractor based in Arlington, Virginia. We offer a broad range of technical expertise and experience in Digital Transformation, Data Management/Data Science, and Systems Modernization. At SIG, our people are our mission. Come join our team! A successful candidate will be offered the following:Great work/life balanceEligibility for performance-based participation in cash bonusesPotential to participate in growth of the company through incentivesExcellent benefits, including health, dental, vision, generous PTO, a 401(k) with match, life insurance, short- and long-term disability, and a health savings account (HSA)Additionally, this position is expected to be generally remote, with occasional visits to the office and client facilities in the Washington, DC metropolitan area as needed.Key ResponsibilitiesDesign, build, and maintain AWS cloud infrastructure supporting production and development environments, applying Well-Architected Framework best practices.Author, test, and maintain Infrastructure-as-Code using Terraform for provisioning and lifecycle management of cloud resources.Develop and maintain Ansible playbooks/roles for configuration management, application deployment, and environment consistency.Administer and extend CloudBolt for self-service provisioning, hybrid cloud orchestration, and governance of cloud resource requests.Implement DevSecOps practices across the software and infrastructure delivery lifecycle, including security scanning, policy-as-code, and compliance automation.Build and maintain CI/CD pipelines to automate build, test, security scanning, and deployment of infrastructure and applications.Write and maintain scripts (e.g., Python, Bash, PowerShell) to automate operational tasks, integrate tooling, and reduce manual effort.Monitor cloud environments for performance, cost, security, and availability; troubleshoot and resolve infrastructure issues.Apply and enforce cloud security controls, including IAM policies, network segmentation, secrets management, and encryption standards.Collaborate with program management, engineering, and client stakeholders to translate requirements into infrastructure and automation solutions.Document architecture, processes, and runbooks to support operational continuity and knowledge transfer.Support audits, assessments, and compliance activities (e.g., FedRAMP, NIST 800-53) as applicable to the contract.Develop and maintain serverless workflows and data pipelines using AWS Lambda, Glue, Step Functions, and EventBridge.Required QualificationsBachelor 's degree plus a minimum of 8 years of relevant experience in cloud engineering, DevOps, DevSecOps, or infrastructure engineering; equivalent combination of education and experience considered.Demonstrated hands-on experience with Amazon Web Services (AWS), including core compute, storage, networking, and security services.Proven experience authoring and deploying infrastructure using Terraform.Proven experience creating and deploying configuration management/automation using Ansible.Direct experience with CloudBolt or comparable cloud management/orchestration platforms.Strong scripting and coding ability (e.g., Python, Bash, or similar) for automation and tooling integration.Solid understanding of DevSecOps principles, including CI/CD, security-as-code, and shift-left security practices.Experience with infrastructure provisioning in hybrid or multi-account cloud environments.Strong troubleshooting skills across networking, compute, and application layers in cloud environments.Excellent written and verbal communication skills, with the ability to work directly with government and client stakeholders.Must be a U.S. Citizen and able to obtain and maintain a Public Trust clearance.Preferred QualificationsExperience developing serverless data and application workflows using AWS Lambda, Step Functions, and EventBridge.Experience building and maintaining ETL/data pipelines using AWS Glue.Familiarity with event-driven architecture patterns on AWS (SQS, SNS, EventBridge).Experience with AWS Secrets Manager, Systems Manager Parameter Store, or similar for secrets and configuration management.Working knowledge of AWS API Gateway and Lambda-based microservices development.AWS certification(s) such as AWS Certified Solutions Architect, AWS Certified DevOps Engineer, or AWS Certified Security – Specialty.Experience supporting government or federal contracting environments (e.g., FAA or other federal agencies); Current FAA clearance is highly preferred.Familiarity with containerization and orchestration technologies (Docker, Kubernetes/ECS).Experience with monitoring and logging tools (e.g., CloudWatch, Splunk, ELK/OpenSearch).Familiarity with compliance frameworks such as NIST 800-53, FedRAMP, or FISMA.Experience with source control and collaboration tools (e.g., Git, GitLab, GitHub, Jira, Confluence).