AWS DevSecOps & Cloud Security Engineer

Booz Allen Hamilton is seeking a senior AWS DevSecOps and Cloud Security subject matter expert to support Air Force and Department of Defense missions in AWS GovCloud. This onsite role helps you design secure cloud foundations, automate security controls, and help mission capabilities move from development into secure, resilient operations.

What you’ll get

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development and tuition assistance
• Work-life programs and dependent care
• Recognition awards program
• Benefit eligibility for full-time and part-time employees working at least 20 hours a week on a regular basis

Responsibilities

• Develop, manage, and secure cloud-native applications and container platforms supporting Air Force and Department of Defense missions
• Build automation and security controls that enable reliable deployment of mission applications and AI-enabled capabilities in AWS GovCloud
• Collaborate with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders to deploy and operate AI agents built with Agent Foundry, enterprise knowledge and retrieval applications, data analytics platforms, and computer vision capabilities
• Design secure AWS architectures and establish repeatable deployment processes across environments
• Develop Infrastructure as Code and build/maintain CI/CD pipelines with automated testing, security scanning, and policy enforcement
• Manage and harden containerized workloads
• Implement identity and access controls, network segmentation, encryption, and secrets management
• Translate cybersecurity requirements into automated controls
• Support Risk Management Framework (RMF) and Authority to Operate (ATO) activities through technical implementation and evidence generation
• Implement logging, monitoring, and alerting, and support vulnerability remediation and operational troubleshooting
• Review architectures, evaluate cloud and container technologies, and mentor engineers on secure development and DevSecOps practices
• Improve the reliability and security of cloud-hosted applications while moving mission capabilities into secure, resilient operation

Requirements

• 5+ years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering
• 3+ years designing, deploying, and securing AWS environments using services such as IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config
• Experience developing Infrastructure as Code using Terraform, AWS CloudFormation, or AWS CDK
• Experience building, maintaining, and troubleshooting CI/CD pipelines with automated builds, testing, security checks, and releases using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services
• Experience deploying and managing containerized workloads using Docker and Kubernetes
• Experience integrating vulnerability management, application and infrastructure security scanning, secrets management, software supply chain security, and compliance checks into delivery workflows
• Experience with Linux system administration and automation using Bash or Python
• Experience working across application development and cybersecurity teams across the software development lifecycle, including knowledge of Zero Trust principles and secure-by-design practices
• Ability to obtain a Secret clearance
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering

Technologies

• AWS, AWS GovCloud, IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, AWS Config
• Terraform, AWS CloudFormation, AWS CDK
• GitHub Actions, GitLab, Jenkins, Azure DevOps
• Docker, Kubernetes
• Bash, Python

Nice if you have

• Experience supporting Air Force, Space Force, Department of Defense, or Intelligence Community programs, including work in AWS GovCloud or other regulated Cloud environments
• Experience supporting RMF and ATO activities and implementing NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements
• Experience with Kubernetes and container security, Amazon EKS, GitOps, Policy-as-Code, or automated compliance validation
• Experience deploying and operating AI and ML, generative AI, computer vision, or data analytics applications, including MLOps or LLMOps practices
• Experience with Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, or agentic AI platforms
• Experience implementing cloud security posture management, continuous monitoring, enterprise observability, or incident response processes
• Secret clearance
• Master’s degree in a Technical field
• AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified DevOps Engineer – Professional Certification
• CISSP, Security+, or equivalent cybersecurity certification

Clearance and investigations

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Compensation

Projected compensation range: $77,500.00 to $176,000.00 (annualized USD). This posting will close within 90 days from the posting date.

Work model

This position is onsite, with work primarily performed full-time at a customer facility where employees collaborate directly with colleagues and customers as required by the role.

Identity verification and interview policy

• During the hiring process, you will complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• You are expected to be on camera during interviews and assessments.
• Booz Allen reserves the right to take your picture to verify your identity and prevent fraud.
• Use of AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.

Non-discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.