AWS DevSecOps Engineer

acu Cyber is seeking for a skilled AWS Dev Sec Ops  Engineer to support Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. This role combines cloud security architecture, Dev Sec Ops  automation, and advanced firewall/network security engineering. You will collaborate closely with software engineers to design secure systems, automate operations, and ensure the reliability, scalability, and security of our AWS cloud environments.

An automation‑first mindset is critical — we aim to eliminate manual security tasks through self‑healing and compliant infrastructure.

Key Responsibilities:

Dev Sec Ops  Engineering & Automation

• Design, implement, and maintain Dev Sec Ops  pipelines supporting CI/CD, continuous monitoring, and automated security testing.
• Embed SAST, DAST, SCA, and compliance checks directly into CI/CD tools (Jenkins, Git Lab CI, AWS Code Pipeline).
• Automate operational tasks and security workflows using Python, Bash, or Go.
• Create SOAR-style automated incident response playbooks and threat detection routines.
• Manage and enhance CI/CD tools such as Jenkins, Git, Jira, Artifactory, and Sonar Qube.

Cloud Security Architecture

• Design secure, scalable AWS architectures using best practices and Infrastructure as Code (Terraform, Cloud Formation).
• Implement policy-as-code to detect and prevent cloud resource misconfigurations before deployment.
• Build and maintain containerized workloads on ECS and EKS, including automated container vulnerability management.

Firewall, Network & Infrastructure Security

• Deploy, configure, and manage AWS-native network security tools: AWS WAF, AWS Network Firewall, Security Groups, and NACLs.
• Maintain and operate virtualized NGFWs (Palo Alto, Fortinet, Check Point) running in AWS.
• Monitor and analyze firewall logs, IDS/IPS alerts, VPC flow logs to identify and mitigate threats.
• Manage firewalls, F5 BigIP, VPN, DNS, SFTP, and other TCP/IP-based services.

Cloud Operations & Infrastructure Management

• Manage AWS services including EC2, VPC, Lambda, S3, EFS, ECR/ECS, EKS, Route
  53, IAM, RDS, Cloud Trail, and Cloud Watch.
• Develop and maintain infrastructure-as-code for provisioning, configuration, patching, and lifecycle management.
• Conduct performance, availability, and security assessments across cloud and container environments.
• Troubleshoot incidents, perform root cause analysis, and implement durable remediation.
• Maintain system documentation, architecture diagrams, and security procedures.

Identity, Access & Compliance

• Implement and enforce least-privilege principles using AWS IAM, SSO, and identity integrations.
• Automate permission audits and cloud security posture monitoring.
• Support compliance with frameworks such as SOC 2, HIPAA, PCI-DSS, and ISO 27001.