DevSecOps Engineer - Infrastructure

The AWS Infrastructure Engineer supports the Operations workstream of a large federal client's technology operations, maintenance, and enhancement program, providing infrastructure architecture and automation support. This is an architect-level role: the engineer designs the AWS infrastructure-as-code approach and CI/CD automation that the delivery team executes, rather than performing day-to-day, hands‑on‑keyboard configuration.

Working alongside the Solutioning Architect, Dev Ops Engineers, and Systems Engineers, this person architects the AWS account structure, instance provisioning, and network connectivity needed to stand up RHEL 8 servers across multiple non‑production and production environments, and defines the Infrastructure-as-Code (Terraform, AWS Cloud Formation) templates and standards used to build and repeat that migration across each environment tier. The role also owns the architecture for automating the CI/CD pipeline that builds, tests, and promotes infrastructure and application changes up through Production.

Success in this role requires deep, architecture-level expertise in AWS infrastructure and Infrastructure-as-Code (Terraform and/or Cloud Formation), strong familiarity with Dev Sec Ops  and Agile delivery practices, and the ability to translate migration requirements into a solution design that aligns with the client's governance and security standards.

• Architect the AWS Infrastructure-as-Code approach (Terraform, Cloud Formation) used to stand up and configure RHEL 8 servers across multiple non‑production and production environments.
• Design AWS account structure, EC2 instance provisioning, VPC configuration, and network connectivity.
• Account for the system's 30+ internal and external partner integrations when designing secure interface patterns for a FedRAMP-authorized (Gov Cloud) environment, ensuring those patterns are repeatable across the full range of non‑production and production environment tiers.
• Own the architecture for automating the CI/CD pipeline (e.g., Jenkins, Git Hub) that builds, tests, and deploys infrastructure and application changes up through Production.
• Define reusable Terraform and Cloud Formation templates and IaC standards to ensure consistency and repeatability as the migration approach is repeated across each environment tier.
• Help define the environment tier build‑out sequence and validation strategy — determining which environment tier is stood up and migrated first and how it is validated before promoting the migration to the next tier.
• Provide technical direction and design review to Dev Ops Engineers and Systems Engineers executing infrastructure automation and RHEL 8 server configuration.
• Support the architecture for standing up and configuring RDS instances as part of the environment migration, in coordination with the Database Administrator.
• Support planning for Jenkins job migration and DNS cutover (F5) activities at an architecture and design level.
• Incorporate vulnerability and cloud security posture scanning (e.g., Nessus, Turbot) into the infrastructure architecture.
• Participate in and help lead technical discovery and design sessions with application, infrastructure, security, and cloud engineering stakeholders.
• Ensure infrastructure designs comply with the client's technical reference model, ATO/POA&M requirements, and Dev Sec Ops  best practices.
• Help evaluate which existing POA&M are addressed or closed as a result of the RHEL 7 to RHEL 8 migration.
• Support performance testing, monitoring, and remediation activities by providing infrastructure‑level analysis and recommendations.
• Document architecture decisions, infrastructure designs, and runbooks in Confluence and Jira.
• Coordinate with the Solutioning Architect and…