DevSecOps & Automation Engineer with Security Clearance

DevSecOps & Automation Engineer Clearance: Top Secret cleared
Location: Arlington, VA Role summary. Leads the security control implementation and Authorization to Operate (ATO) effort across Impact Levels, mapping FedRAMP Moderate/High and FedRAMP+ (DoD-specific) controls to the ITD environment and shepherding the RMF package. Key responsibilities: Build and maintain RMF/ATO packages and control implementation evidence for IL2/4/5/6. Map FedRAMP Moderate/High baselines and supplement with DoD FedRAMP+ controls per Impact Level.

Implement and validate threat detection (GuardDuty), configuration compliance (AWS Config), API audit logging (CloudTrail), and FIPS 140-2 key management (KMS). Support DoD eICAM integration and Cross Domain Solution (CDS) security requirements. Interface with DARPA/DoD authorizing officials and assessors. Must-have skills: Infrastructure as Code (Terraform and/or CloudFormation/CDK) and pipeline tooling (CodePipeline, Git-based CI/CD). Scripting/automation (Python) and serverless (Lambda). DevSecOps practices and security automation in regulated environments.

AWS services named in the SOO: EC2, EBS, S3, S3 Glacier, VPC, Transit Gateway, Direct Connect, Route 53, CloudFront, CloudWatch, CloudTrail, Lambda, GuardDuty, AWS Config, ELB, KMS (FIPS 140-2), RDS, AWS Backup, and Splunk integration. AWS DevOps Professional certification preferred. Additional notes about the role:
Role summary. Runs day-2 operations for the ITD environment and helps stand up ITD as an MSP to the Agency — monitoring, backup/DR, logging integration, incident response, and usage/cost reporting.

Key responsibilities

Operate monitoring and observability (CloudWatch application/infrastructure monitoring). Configure and maintain centrally managed backup (AWS Backup) and long-term storage (S3 Glacier) for DR. Integrate and manage log forwarding to Splunk. Manage relational database services (RDS) and file sharing services in production. Provide monthly usage/cost reporting aligned to the fixed-unit-price + variable-usage invoicing model, and support account access management and onboarding. Contribute to MSP runbooks, SLAs, and service-desk processes.

Must-have skills

AWS operations at scale (CloudWatch, AWS Backup, RDS, S3/Glacier). SIEM/log integration experience (Splunk). Managed Service Provider / cloud operations experience, ideally in DoD. AWS SysOps Administrator certification preferred.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance required.

Compensation and Benefits
Salary Range: $200,000 - $220,000 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.) Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs. Gridiron IT Solutions is an

Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies.

Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.