Must be a US Citizen with a Secret or higher security clearance.
This role will be performed on-site in Huntsville, AL.
Summit TRC is seeking a Cloud DevSecOps Engineer to join our team supporting secure, scalable, and highly available cloud infrastructure and software factory environments in the Defense sector. This engineer will play a key role in designing, automating, securing, and optimizing cloud infrastructure and CI/CD environments while integrating DevSecOps practices throughout the software development lifecycle.
This role requires someone who can troubleshoot complex infrastructure issues, automate repetitive processes, collaborate closely with development and security teams, and apply sound engineering practices to build reliable and secure cloud environments.
Responsibilities- Design, deploy, and manage AWS and/or Azure infrastructure using Terraform and Infrastructure as Code.
- Develop, maintain, and optimize CI/CD pipelines using GitLab, Azure DevOps, Jenkins, or similar tools.
- Integrate security controls including vulnerability scanning, code analysis, and compliance checks into CI/CD workflows.
- Automate infrastructure provisioning, configuration, deployments, and security processes using Ansible, PowerShell, Python, Bash, or similar tools.
- Design and deploy Kubernetes and containerized application deployments and administration.
- Implement and troubleshoot cloud networking, security, identity/access, and connectivity solutions.
- Monitor, troubleshoot, and optimize cloud infrastructure, pipelines, and software factory environments.
- Collaborate with software developers, security engineers, and operations teams to resolve issues and improve workflows.
- Maintain technical documentation and contribute to DevSecOps best practices and continuous improvement.
Qualifications- Bachelor's degree in a related field, or equivalent experience.
- Experience working with cloud technologies, including AWS and/or Azure.
- Hands-on experience with Kubernetes deployments (AWS EKS)
- Experience with Azure DevOps, GitLab, Jenkins, or similar CI/CD platforms.
- Experience with Linux and/or Windows system administration.
- Strong understanding of cloud networking, security, automation, and compliance.
- Familiarity with DISA STIGs, NIST, RMF, or other DoD security frameworks.
- Strong troubleshooting, problem-solving, and communication skills.
Preferred Qualifications- Security+ or other DoD 8570/8140-aligned certification.
- AWS or Azure cloud certification.
- Experience supporting DoD software factories or DevSecOps environments.
- Experience with Docker/Podman, vulnerability scanning, SAST/DAST, or other security automation tools.
