Builds, scripts, and tests Compliance as Code to apply security configuration(s) to cloud resources upon (or after) deployment
Writes CaC and IaC for both cloud native service deployment and for hosted application deployment to cloud services (AWS Elastic Beanstalk, AWS Lambda, Azure App Services)
Provides cloud service expertise to cloud-deployed applications, assisting application developers with integrating application-specific components into available cloud services
Secures cloud service and application resources according to industry standards and cloud provider best practices and collects and provides evidence for security baseline adherence
Prepares operating instructions, compiles documentation of IaC when necessary, and analyzes system capabilities to resolve questions of IaC intent, output requirements, input data acquisition, programming techniques, and controls
Works within Agile SDLC framework to include performing work activity within two- to three-week sprints, participating in daily scrums, and utilizing sprint tracking software to track and communicate individual work activity to stakeholders

Requirements

Candidate must be a U.S. Citizen
Candidate must have active DoD Secret Clearance, or eligibility to obtain/maintain DoD Secret Clearance
Candidate must have a bachelor's Degree (preferred in STEM field)
Candidate must have an active Security+ CE or other current 8140 IAT II certification
Candidate must have at least 10 years of related experience with Cloud engineering, automation, security, and Agile delivery
Expertise in cloud-native architectures, application refactoring, database migration, and SaaS integration
Strong proficiency in AWS (Elastic Beanstalk, CloudFormation, Lambda, IAM, VPC, CloudWatch, S3, etc.)
Understanding of cloud-native architectures and managed services
Experience in writing Infrastructure as Code (IaC) (Terraform, Ansible, etc.)
CI/CD tools (e.g., Jenkins, GitLab CI, AWS CodePipeline)
Configuring and securing Cloud-based networking
Scripting skills (Python, Bash, PowerShell)
Understanding of Docker or other containerization platform and container lifecycle, configuration and maintenance
Ability to deploy and manage workloads on Kubernetes (EKS, AKS, or self-managed clusters)
Ability to own tasks independently within a sprint cycle

Benefits

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Compliance as CodeInfrastructure as CodeAWS Elastic BeanstalkAWS LambdaTerraformAnsibleCI/CDPythonBashPowerShell

Soft Skills

independent task ownershipcommunicationcollaborationproblem-solvingagile methodology

Certifications

DoD Secret ClearanceSecurity+ CE8140 IAT II certification