DevSecOps / Cloud Engineer

Location: This is a US-based remote position. Employment Type: Full-Time Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties. Job Summary We are looking for a DevSecOps / Cloud Engineer to support CI/CD pipeline automation, STIG compliance automation, and cloud migration for a federal government IT program supporting the U.S. Army Corps of Engineers (USACE), Walla Walla District. You will support the migration of legacy on-premises applications to the USACE CWBI Cloud environment while automating security scanning and remediation workflows across the development pipeline. Key Responsibilities • Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment • Automate DoD STIG compliance checks and vulnerability scanning (ACAS/SCAP) across the development pipeline; import results into DISA STIG Viewer and eMASS • Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days) • Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm • Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible • Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images • Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records • Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy • Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak) • Participate in two-week Agile sprint cycles and contribute to release planning and demonstrations Required Qualifications • U.S. Citizenship required • Minimum active Tier 1 (or higher) federal background investigation, favorably adjudicated, prior to start • Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) • Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security • Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub • Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud • Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline • Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles Preferred Qualifications • Experience with microservices architecture and hardened/Iron Bank container images • Federal government or DoD cloud/cybersecurity program background • AWS certification (e.g., Solutions Architect, Security Specialty) • Familiarity with data cataloging standards (Dublin Core, OpenAPI) Certifications • Active Tier 1+ background investigation prior to start • CompTIA Security+ or DoD 8140-approved equivalent required within six (6) months of contract start • (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) desired for senior/lead roles