Job Type
Full-time
Description
Position Description:
Ailani Wind Joint Venture is seeking an Intermediate Automation / DevSecOps Engineer to engineer, administer, automate, and sustain Cloud One AWS GovCloud infrastructure at IL4, IL5, and IL6. The engineer provisions secure cloud services and supports application deployment through infrastructure-as-code and DevSecOps practices.
This position integrates security hardening, Zero Trust controls, automation, monitoring, and configuration management into repeatable cloud operations while maintaining complete architecture and system documentation.
Primary Responsibilities:
Typical Responsibilities/Tasks:
• Provision, configure, administer, monitor, and sustain AWS GovCloud and Cloud One infrastructure and services.
• Manage EC2, S3, EBS, RDS, VPC, IAM, Security Groups, network ACLs, and related AWS services.
• Develop, maintain, test, and deploy infrastructure-as-code templates, scripts, modules, and reusable automation.
• Build and support DevSecOps pipelines used to deploy applications, configurations, and infrastructure changes.
• Automate repeatable administration, compliance, monitoring, deployment, backup, and reporting activities.
• Implement and validate Windows and RHEL STIGs, FIPS requirements, Secure Configuration Compliance checks, and approved security baselines.
• Configure Cloud One boundary services and Zero Trust controls in coordination with network and cybersecurity teams.
• Deploy and sustain containerized workloads and Kubernetes services when applicable to the approved architecture.
• Monitor availability, performance, capacity, logs, costs, and security events and correct or escalate identified conditions.
• Troubleshoot cloud, automation, pipeline, application-deployment, identity, storage, and connectivity issues.
• Maintain cloud architecture diagrams, inventories, build records, code repositories, runbooks, test results, and change documentation.
Requirements
Required Qualifications:
• Hands-on knowledge of AWS GovCloud, Cloud One, EC2, S3/EBS, RDS, VPC, IAM, Security Groups, and network ACLs.
• Experience implementing infrastructure as code, configuration automation, scripting, and CI/CD or DevSecOps pipelines.
• Knowledge of Windows and RHEL security hardening, STIG implementation, SCC validation, FIPS, and Zero Trust principles.
• Working knowledge of containers and Kubernetes-based application environments.
• Ability to troubleshoot complex cloud-service, identity, network, pipeline, and deployment issues.
• Ability to produce accurate technical documentation and operate within formal configuration- and change-management processes.
Required Clearance: Active Secret
Certifications: Security+ CE or higher (for example, CASP+ CE or CISSP)
Required Education: High school diploma or GED.
Required Experience: Minimum of three (3) years of specialized cloud administration experience in Federal or DoW environments, including hands-on work in AWS GovCloud or Cloud One.
Desired Qualifications
• AWS Certified Solutions Architect, SysOps Administrator, or DevOps Engineer certification.
• Experience with Terraform, AWS CloudFormation, Ansible, or comparable infrastructure automation tools.
• Experience with Git-based workflows, automated testing, artifact repositories, and container security.
• Experience supporting DAF Cloud One workloads at IL4, IL5, or IL6.
