Platform Security Engineer- Secret Clearance Required
Listed on 2026-09-25
-
IT/Tech
Cloud Computing: Infrastructure & Operations, Cybersecurity, Systems Engineer
Description
Job Location:
Aberdeen Proving Grounds, MD
Security Clearance:
Active Secret security clearance required
Citizenship: US Citizenship required
Onsite Expectations: 20% onsite at customer site (APG)
Make an Impact Where It Matters MostAt Sherpa 6, you won’t just build secure cloud platforms—you’ll help shape the systems that protect our nation. We’re looking for a Platform Security Engineer who brings deep security expertise, strong networking fundamentals, and modern cloud engineering practices to support mission-critical systems for a highly engaged customer.
If you enjoy designing secure architectures, automating cloud infrastructure, integrating agentic AI into Dev Sec Ops workflows, and solving complex technical problems that matter, you’ll find this an exceptional opportunity. You’ll join a collaborative, high-trust engineering team where your decisions immediately drive real-world outcomes.
Responsibilities- Support the design and implementation of AWS-based solutions aligned with customer and project needs.
- You will have significant ownership over Dev Sec Ops strategy, tooling, automation, and cloud deployment approaches
- Provide hands-on technical contributions while also mentoring and guiding solution development.
- Collaborate with customer and internal teams to validate release readiness, ensuring regression, performance, and security testing gates are met.
- Create and maintain release documentation, including schedules, rollback plans, and release notes.
- Identify and implement improvements that enhance release efficiency, reliability, and scalability.
- Troubleshoot and resolve build, pipeline, and deployment issues efficiently.
Monitor release metrics to ensure compliance with SLAs and organizational standards. - Develop Infrastructure-as-Code (IaC) using Pulumi or Terraform to deploy solutions to cloud environments.
- Work closely with the customer and internal teams to understand existing solutions, champion updates, and guide architectural evolution.
- Research, propose, and validate solutions tailored to customer needs.
- Clearly communicate status, challenges, and recommendations, owning all Dev Sec Ops deliverables for the project
Required Qualifications
- Bachelor's degree in Computer Science, Engineering, or related field, or equivalent experience.
- 5+ years of experience in Dev Ops, Cloud Engineering , build engineering, or a similar discipline.
- Proficiency in scripting languages such as Python, Bash, Power Shell, or Groovy.
- Excellent analytical, problem-solving, communication, and teamwork skills.
- Hands-on cloud engineering in AWS (compute, networking, IAM, storage) with Infrastructure-as-Code (Pulumi or Terraform).
- Building CI/CD pipelines with security gates and scanning built in (SAST, dependency, and container scanning).
- Ability to take a set of security requirements and build a repeatable, auditable process to maintain compliance — implementing a control set such as NIST, supporting the ATO (Authority to Operate) process for systems on a DoW network, and demonstrating compliance to DoW auditors.
- Strong networking fundamentals — the layers, how they interact, and hands-on experience securing them.
- Experience implementing role-based, least-privilege access.
- Continuous security monitoring — access logging, vulnerability scanning, and anomaly detection.
- Designing and automating secure MLOps pipelines — data ingestion and transformation through model deployment.
- Software-Defined Networking (SDN) at scale — multi-site policy enforcement, monitoring, and failover.
- Automating SDN configuration for distributed or fielded systems.
- Secure configuration management and update automation for edge/fielded deployments.
- Experience in a classified / ATO'd government test or…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).