DevSecOps Engineer I with Security Clearance

About the Role

This DevSecOps Engineer position bridges cloud infrastructure, on-premise training environments, and cybersecurity operations. The role focuses on maintaining functionality and security across technical environments, from backend servers and AWS cloud to physical classroom setups and end-user devices. It includes general systems administration, Active Directory management, enterprise mobile device management (MDM), and deployment of physical training hardware, while also driving AWS cloud initiatives. The goal is to keep systems resilient, hardened, and compliant with federal security mandates.

Key Responsibilities

• Architect, deploy, and manage AWS resources, including provisioning EC2 instances, setting up subnets, and building automated deployment pipelines.
• Physically and logically support local classroom setups, maintaining on-premises hardware and ensuring localized training systems are operational and secure.
• Manage the Active Directory environment, handling user and computer management, and establishing integrations between identity systems and AWS.
• Oversee the mobile device management (MDM) platform, ensuring ERDs, tablets, and remote endpoints are enrolled, monitored, and secured with configuration policies.
• Perform active defense and vulnerability management, including hardening EC2 instances, cloud architecture, local classroom workstations, and mobile devices.
• Routinely run ACAS and DISA STIG scans, analyze results, and remediate vulnerabilities across cloud, physical servers, and mobile platforms.
• Draft, manage, and update critical system documentation mapped to NIST SP 800-171 and NIST SP 800-53 standards.

Requirements & Tech Stack

• Strong technical foundation in systems administration and hybrid cloud/on-premise environments.
• Hands-on experience administering Active Directory and enterprise MDM solutions.
• Practical understanding of AWS services (EC2, networking, pipelines).
• Understanding of local physical network topologies used in classroom or closed-network settings.
• Deep understanding of federal compliance frameworks, particularly NIST 800-171 and NIST 800-53.
• Direct experience using vulnerability assessment tools like ACAS and applying DISA STIGs.
• Operational track record of engineering solutions, applying patches, enforcing endpoint policies, and fixing findings across cloud and physical infrastructure.

Qualifications

• Bachelor's degree.
• Active CompTIA Security+ certification.
• US citizen capable of obtaining and maintaining a Secret Security clearance.