AWS DevSecOps & Cloud Security Engineer
Booz Allen Hamilton2 days ago
Base Salary
$78k - $176k/yr
Responsibilities
- Design, deploy, manage, and secure AWS cloud-native applications and container platforms.
- Develop Infrastructure as Code and build and maintain CI/CD pipelines with automated builds, testing, security checks, and releases.
- Manage and harden Docker and Kubernetes workloads, including identity and access controls, network segmentation, encryption, and secrets management.
- Integrate vulnerability management, application and infrastructure scanning, software supply chain security, and compliance checks into delivery workflows.
- Implement logging, monitoring, alerting, vulnerability remediation, and operational troubleshooting to improve application reliability and security.
- Translate cybersecurity requirements into automated controls and support RMF and ATO activities through technical implementation and evidence generation.
- Review architectures and cloud and container technologies, and mentor engineers on secure development and DevSecOps practices.
- Collaborate with software, AI/ML, cybersecurity, architecture, and mission teams to deploy AI agents, knowledge and retrieval applications, data analytics platforms, and computer vision capabilities.
Requirements
- At least 5 years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering.
- At least 3 years of experience designing, deploying, and securing AWS environments using identity, networking, encryption, logging, and monitoring services.
- Experience with Terraform, AWS CloudFormation, or AWS CDK for Infrastructure as Code.
- Experience building, maintaining, and troubleshooting CI/CD pipelines using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services.
- Experience deploying and managing Docker and Kubernetes workloads.
- Experience with Linux system administration and automation using Bash or Python.
- Knowledge of Zero Trust principles and secure-by-design practices, plus experience working across software development and cybersecurity teams.
- Ability to obtain a Secret clearance.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering.
- Preferred experience includes Air Force, Space Force, Department of Defense, Intelligence Community, AWS GovCloud, regulated cloud, RMF, ATO, NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements.
- Preferred experience includes Amazon EKS, GitOps, Policy-as-Code, automated compliance validation, AI/ML or generative AI operations, MLOps or LLMOps, Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, agentic AI platforms, cloud security posture management, observability, and incident response.
- Preferred qualifications include a Secret clearance, a technical master’s degree, AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, AWS Certified DevOps Engineer – Professional, CISSP, Security+, or an equivalent cybersecurity certification.
Benefits
- Health, life, disability, financial, and retirement benefits are available to eligible employees.
- Paid leave, professional development, tuition assistance, work-life programs, dependent care, and recognition awards are offered.
- The role is hybrid in San Antonio, Texas, with work expected at a Booz Allen or customer facility according to leadership and role needs.
- Full-time and part-time employees working at least 20 hours per week on a regular basis may participate in benefit programs.
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).