Automation / DevSecOps Engineer

Automation / DevSecOps Engineer

Quantico, VA

Pay From

$60 per hour

MUST

Experienced Automation / DevSecOps Engineer

Top Secret Clearance required

DoD 8140

CompTIA Security+ CE or a higher-level certification (e.g., CompTIA SecurityX, formerly CASP+, or CISSP) required

3+ years of specialized experience in cloud administration within Federal/Department of War (DoW) environments, with specific expertise in GovCloud offerings (e.g., AWS, Microsoft Azure, Google Cloud, and/or VMware vSphere).

Proficiency managing core AWS services (EC2, S3, VPC, RDS, and IAM) and configuring Security Groups and NACLs to implement Zero Trust architectures

Familiarity with CloudOne shared services, boundary protections, and ingress/egress patterns

Experience applying DISA STIGs to Windows Server and RHEL/Linux using Group Policy or automation tools and remediating SCAP Compliance Checker findings; knowledge of FIPS 140-2 encryption standards; and proficiency with Infrastructure as Code, automation, and scripting.

Bachelor’s preferred

DUTIES

Develop, test, and maintain Infrastructure as Code (e.g., Terraform or AWS CloudFormation) to provision and configure EC2, S3/EBS, VPC, RDS, and IAM resources in AWS GovCloud.

Build, operate, and improve CI/CD and DevSecOps pipelines with integrated security scanning, approval gates, and automated application deployment.

Automate STIG hardening of Windows Server and RHEL/Linux systems using Ansible, Chef, Puppet, or Group Policy.

Run SCAP Compliance Checker (SCC) scans, analyze the results, and remediate or document findings to maintain IL4/IL5/IL6 compliance.

Configure Security Groups, NACLs, and IAM policies to enforce least privilege and Zero Trust within CloudOne shared services and boundary protections.

Deploy and maintain containerized applications and support Kubernetes workloads where applicable.

Automate patching, configuration drift detection, health checks, and routine operational tasks using scripting languages such as Python, PowerShell, or Bash.

Implement and validate FIPS 140-2 compliant encryption for data at rest and in transit.

Monitor cloud resources, logs, and pipeline status, and troubleshoot deployment, performance, and availability issues.

Implement approved changes through the configuration and change management process and update configuration baselines.

Maintain current system documentation, runbooks, and architecture diagrams, and provide input to monthly cloud status reporting.

Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. “Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act“.