Quick overview
Job description
Command Post Technologies, Inc. is seeking a Cloud & DevSecOps Engineer to build and automate the infrastructure pipelines that power J7 JTSD's Azure environments. Based out of Suffolk, VA, you will work in tandem with NIWC and contractor architects to eliminate manual provisioning by coding infrastructure, automated configuration baselines, and CI/CD security validation. As a Cloud & DevSecOps Engineer your duties will include the following, but are not limited to:
- Write, test, and maintain production-grade Infrastructure as Code using Terraform, Azure Bicep, and Ansible.
- Implement automated operating system hardening playbooks (DISA STIG compliance) for Red Hat Enterprise Linux and Windows Server virtual machines.
- Construct secure CI/CD pipelines in Azure DevOps to automate code vulnerability scans, static code analysis (SonarQube), and IaC policy enforcement.
- Deploy and manage containerized application workloads utilizing Azure Kubernetes Service (AKS) and Azure Container Registry.
- Automate continuous monitoring agents, log collection forwarders, and security telemetry routing to SIEM solutions. Requirements
- U.S. Citizenship
- Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or related technical field (or equivalent work experience)
- 5+ years of progressive engineering experience (or 3+ years with a Master’s degree)
- Active Secret clearance
- Minimum 2+ years writing and maintaining production Terraform configurations or Azure Bicep / ARM templates.
- Hands-on experience developing Ansible playbooks for OS configuration, application deployment, or hardening.
- Minimum 2+ years managing virtual networks, virtual machines, and storage accounts in Microsoft Azure.
- Current DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, or CCNA Security)
- Strong problem-solving skills and ability to troubleshoot complex issues
- Effective communication and collaboration skills
Preferred Qualifications
- Active Top Secret clearance with SCI eligibility.
- Microsoft Certified: Azure Administrator Associate (AZ-104) and/or DevOps Engineer Expert (AZ-400); HashiCorp Certified: Terraform Associate.
- Demonstrable experience automating DISA STIG remediation across RHEL 8/9 and Windows Server using Ansible or PowerShell DSC.
- Practical experience integrating automated security gates (Trivy, Checkov, SonarQube, Prisma Cloud) into Azure DevOps or GitLab CI pipelines.
- Direct experience deploying and operating production Azure Kubernetes Service (AKS) clusters in government-regulated environments.
- Strong technical documentation, briefing, and reporting experience
- Great health benefits (for more info contact us directly)
- Leadership training
- 401k with generous company matching
- Employee Stock Ownership Plan (ESOP)
- Career professional development
- Tuition reimbursement
- Flexible hours
- Work/Life balance
- Rewards and recognition
- Paid Time Off
- Parental Leave
Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants. An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions.
Similar jobs
- VI

Cloud Software Engineer with Security ClearanceNew
Visionist, Inc. · Columbia, MD · Hybrid 🇺🇸
SQLSVNGit+10Technology$135k - $206k/yrYesterday - AW

AMS Cloud Architect III, AWS Managed Services (AMS) with Security Clearance
Amazon Web Services, Inc. · Dallas, TX · Hybrid 🇺🇸
SQLAWSGDPR+6Technology$153.6k - $207.8k/yr4 days ago - SA
Cloud EngineerNew
SAIC · Herndon, VA · Remote 🇺🇸
OracleSQLAWS+5Technology$160.0k - $200k/yr8 hours ago - AK

Senior Network Engineer (Active Top Secret Clearance with SCI Re with Security Clearance
Akima · Honolulu, HI · On-site 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft PowerPoint+4Technology$145k - $150k/yr3 days ago - MA

Senior Cloud Engineer with Security ClearanceNew
MANTECH · Chantilly, VA · Hybrid 🇺🇸
DockerGCPOracle+16TechnologySalary not listedYesterday - TC

Sr. OT Network EngineerNew
TrueNet Communications · Liberty, North Carolina · On-site 🇺🇸
Network AdministrationTechnologySalary not listed1 hour ago - TC

Sr. OT Network EngineerNew
TrueNet Communications · Georgetown, Kentucky · On-site 🇺🇸
Network AdministrationTechnologySalary not listed1 hour ago - ZP

Senior Cloud Engineer - 176026 - 177043 with Security ClearanceNew
Zachary Piper Solutions, LLC · Huntsville, AL · On-site 🇺🇸
DockerMicroservicesAWS+10Technology$170k - $180k/yrYesterday - ZP

Senior Cloud Engineer - 176026 - 177033 with Security ClearanceNew
Zachary Piper Solutions, LLC · Huntsville, AL · On-site 🇺🇸
DockerMicroservicesAWS+10Technology$170k - $180k/yrYesterday - LE

Lead Cloud Architect with Security ClearanceNew
Leidos · Randolph Air Force Base, TX · On-site 🇺🇸
GitAWSCloudFormation+7Technology$154.1k - $278.5k/yrYesterday - LE

AWS Cloud Engineer with Security Clearance
Leidos · Bedford, MA · On-site 🇺🇸
GCPMicroservicesOracle+23Technology$107.9k - $195.1k/yr3 days ago - CP

Cloud Simulation Integration Engineer with Security ClearanceNew
Command Post Technologies, Inc. · Suffolk, VA · Hybrid 🇺🇸
AWSBashPowerShell+4TechnologySalary not listedYesterday