DevSecOps / Cloud Engineer

We are looking for a DevSecOps / Cloud Engineer to support CI/CD pipeline automation, STIG compliance automation, and cloud migration for a federal government IT program supporting the U.S. Army Corps of Engineers (USACE), Walla Walla District. You will support the migration of legacy on-premises applications to the USACE CWBI Cloud environment while automating security scanning and remediation workflows across the development pipeline. Key Responsibilities

• Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment

• Automate DoD STIG compliance checks and vulnerability scanning (ACAS/SCAP) across the development pipeline; import results into DISA STIG Viewer and eMASS

• Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days)

• Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm

• Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible

• Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images

• Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records

• Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy

• Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak)

• Participate in two-week Agile sprint cycles and contribute to release planning and demonstrations

• U.S. Citizenship required

• Minimum active Tier 1 (or higher) federal background investigation, favorably adjudicated, prior to start

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)

• Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security

• Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub

• Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud

• Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline

• Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles Preferred Qualifications

• Experience with microservices architecture and hardened/Iron Bank container images

• Federal government or DoD cloud/cybersecurity program background

• AWS certification (e.g., Solutions Architect, Security Specialty)

• Familiarity with data cataloging standards (Dublin Core, OpenAPI) Certifications

• Active Tier 1+ background investigation prior to start

• CompTIA Security+ or DoD 8140-approved equivalent required within six (6) months of contract start

• (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) desired for senior/lead roles

At Lucayan Technology Solutions LLC, we deliver secure, innovative solutions in support of national defense and intelligence missions. As a trusted government contracting partner, we provide top-tier intelligence and technology services that safeguard our nation. Our team is mission-driven, and we are committed to building careers that matter.