Location: This is a US-based remote position.

Employment Type: Full-Time

Security Clearance: No security clearance required. Minimum active Tier 1 (or higher) federal background investigation required prior to start; ability to obtain a CAC if required by duties.

Job Summary

We are looking for a DevSecOps / Cloud Engineer to support CI/CD pipeline automation, STIG compliance automation, and cloud migration for a federal government IT program supporting the U.S. Army Corps of Engineers (USACE), Walla Walla District. You will support the migration of legacy on-premises applications to the USACE CWBI Cloud environment while automating security scanning and remediation workflows across the development pipeline.

Key Responsibilities

•     Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment

•     Automate DoD STIG compliance checks and vulnerability scanning (ACAS/SCAP) across the development pipeline; import results into DISA STIG Viewer and eMASS

•     Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days)

•     Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm

•     Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible

•     Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images

•     Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records

•     Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy

•     Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak)

•     Participate in two-week Agile sprint cycles and contribute to release planning and demonstrations

Required Qualifications

•     U.S. Citizenship required

•     Minimum active Tier 1 (or higher) federal background investigation, favorably adjudicated, prior to start

•     Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)

•     Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security

•     Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub

•     Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud

•     Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline

•     Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles

Preferred Qualifications

•     Experience with microservices architecture and hardened/Iron Bank container images

•     Federal government or DoD cloud/cybersecurity program background

•     AWS certification (e.g., Solutions Architect, Security Specialty)

•     Familiarity with data cataloging standards (Dublin Core, OpenAPI)

Certifications

•     Active Tier 1+ background investigation prior to start

•     CompTIA Security+ or DoD 8140-approved equivalent required within six (6) months of contract start

•     (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) desired for senior/lead roles