AWS DevSecOps Engineer

Webhead is seeking a mid-level AWS DevSecOps Engineer with three to five years of relevant experience to support the design, deployment, automation, security, and maintenance of cloud-based environments.

The AWS DevSecOps Engineer will work with developers, cybersecurity professionals, system administrators, project managers, and client stakeholders to integrate security throughout the software-development and cloud-infrastructure lifecycle.

The successful candidate will have hands-on experience with Amazon Web Services, infrastructure automation, CI/CD pipelines, cloud security, monitoring, and federal-contracting environments. This position requires someone who can troubleshoot technical issues, improve deployment processes, document solutions, and operate effectively in structured and security-conscious environments.

Key ResponsibilitiesAWS Cloud Engineering

• Build, configure, deploy, and maintain secure AWS cloud environments.
• Support AWS services such as EC2, S3, IAM, VPC, CloudWatch, Lambda, RDS, Route 53, AWS Config, CloudTrail, and Systems Manager.
• Configure and maintain cloud networking, security groups, access controls, storage, compute resources, logging, and monitoring.
• Support containerized workloads using Docker and services such as Amazon ECS or Amazon EKS.
• Assist with cloud migrations, application modernization, and infrastructure optimization.
• Monitor system availability, performance, capacity, and security.
• Troubleshoot cloud infrastructure, application-deployment, networking, and access-related issues.
• Help manage AWS costs, resource utilization, tagging, and environment standards.

DevSecOps and Automation

• Design, build, maintain, and improve automated CI/CD pipelines.
• Integrate security checks into development, testing, build, and deployment processes.
• Automate infrastructure provisioning and configuration using tools such as Terraform, AWS CloudFormation, or comparable technologies.
• Support source-control and pipeline platforms such as GitHub, GitLab, Jenkins, AWS CodePipeline, or Azure DevOps.
• Automate repeatable operational tasks using Python, Bash, PowerShell, or similar scripting languages.
• Help standardize build, test, release, deployment, rollback, and recovery procedures.
• Work with development teams to improve release quality, consistency, and speed.
• Maintain separate development, testing, staging, and production environments.
• Identify manual processes that can be safely automated.

Cloud Security and Compliance

• Apply security controls throughout the cloud and software-development lifecycle.
• Implement and maintain identity and access management using least-privilege principles.
• Support vulnerability scanning, patching, configuration management, and remediation.
• Integrate static application security testing, dynamic application security testing, dependency scanning, container scanning, and secrets detection into CI/CD pipelines.
• Monitor security alerts, logs, configuration changes, and suspicious activity.
• Support encryption, certificate management, secrets management, and secure credential practices.
• Assist with security assessments, audits, system documentation, and remediation plans.
• Help maintain compliance with applicable federal security requirements and client policies.
• Support security-control implementation aligned with frameworks such as NIST, RMF, FedRAMP, FISMA, and applicable Security Technical Implementation Guides.
• Maintain accurate, organized, and audit-ready technical documentation.

Monitoring and Incident Support

• Configure dashboards, alerts, metrics, and centralized logging for cloud systems and applications.
• Use AWS CloudWatch and related tools to monitor system health, availability, performance, and security.
• Investigate incidents, deployment failures, system outages, and performance problems.
• Participate in incident response, root-cause analysis, and corrective-action activities.
• Help develop and test backup, disaster-recovery, business-continuity, and rollback procedures.
• Document incidents, findings, corrective actions, and lessons learned.
• Participate in an on-call rotation when required by the project.

Collaboration and Documentation

• Work closely with software developers, cybersecurity personnel, system administrators, architects, and project managers.
• Participate in sprint planning, technical reviews, release planning, and project-status meetings.
• Translate technical and security requirements into practical implementation tasks.
• Develop and maintain architecture diagrams, operating procedures, deployment instructions, configuration records, and troubleshooting guides.
• Communicate technical risks, dependencies, and recommendations clearly to technical and nontechnical stakeholders.
• Support customer demonstrations, technical reviews, and knowledge-transfer sessions.
• Contribute to continuous improvement of Webhead’s cloud, security, and software-delivery practices., During the first 60-90 days, the AWS DevSecOps Engineer will be expected to:
• Learn Webhead’s client environments, technical standards, security requirements, and delivery processes.
• Review existing AWS environments, access controls, deployment pipelines, monitoring, and documentation.
• Identify immediate operational, automation, performance, and security risks.
• Support active cloud deployments and resolve priority infrastructure or pipeline issues.
• Improve logging, monitoring, alerting, and technical documentation.
• Recommend practical improvements to cloud security, automation, reliability, and deployment consistency.
• Establish productive working relationships with project teams, clients, and technical stakeholders.

• Three to five years of relevant experience in DevOps, DevSecOps, cloud engineering, systems engineering, software deployment, or a related technical role.
• At least two years of hands-on experience working with Amazon Web Services.
• Active AWS certification at the associate level or higher.
• Experience building or maintaining automated CI/CD pipelines.
• Experience with infrastructure-as-code tools such as Terraform or AWS CloudFormation.
• Experience with Git-based source control and collaborative software-development workflows.
• Working knowledge of AWS identity and access management, networking, compute, storage, monitoring, and logging.
• Experience using Linux and command-line administration tools.
• Experience with scripting or automation using Python, Bash, PowerShell, or a comparable language.
• Understanding of cloud-security principles, vulnerability management, secure configuration, and least-privilege access.
• Experience with Docker or another containerization technology.
• Experience supporting federal government contracts or federal customers.
• Ability to create and maintain accurate technical documentation.
• Strong troubleshooting, analytical, and problem-solving skills.
• Strong written and verbal communication skills.
• Ability to work independently while collaborating effectively with a technical team.
• Ability to work on-site in San Antonio as required.
• Must be authorized to work in the United States.

Preferred Qualifications

• AWS Certified Solutions Architect - Associate.
• AWS Certified SysOps Administrator - Associate.
• AWS Certified Developer - Associate.
• AWS Certified DevOps Engineer - Professional.
• Experience with Amazon ECS, Amazon EKS, or Kubernetes.
• Experience with GitHub Actions, GitLab CI/CD, Jenkins, AWS CodePipeline, or Azure DevOps.
• Experience using security tools for code scanning, dependency scanning, container scanning, secrets detection, and vulnerability management.
• Familiarity with NIST SP 800-53, NIST SP 800-171, RMF, FedRAMP, FISMA, or Security Technical Implementation Guides.
• Experience supporting Authority to Operate documentation or security-control assessments.
• Familiarity with Agile or Scrum software-development environments.
• Experience with configuration-management tools such as Ansible, Chef, or Puppet.
• Experience with application-performance monitoring, centralized logging, and incident-management tools.
• Experience supporting high-availability, mission-critical, or regulated environments.
• Current public trust or federal security clearance, or the ability to obtain one if required by a client.
• Bachelor’s degree in computer science, cybersecurity, information systems, engineering, or a related discipline. Substantial relevant experience may be considered in place of a degree.

Pulled from the full job description

• Health insurance
• Paid time off
• Vision insurance
• Health savings account
• Dental insurance
• Flexible spending account
• Life insurance, The anticipated salary range for this position is $100,000-$120,000 annually, based on experience, AWS certifications, technical capabilities, federal-contracting experience, and overall qualifications.

Why Join Webhead?

This is an opportunity to join an established San Antonio technology company during an important period of rebuilding and growth.

The AWS DevSecOps Engineer will work on meaningful cloud and cybersecurity initiatives, collaborate directly with technical and business leadership, and help strengthen the secure delivery of solutions for government and commercial customers.

If you enjoy building secure cloud environments, automating technical processes, solving complex problems, and improving how software is developed and deployed, we would like to hear from you., * Dental insurance

• Employee assistance program
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Vision insurance

About Webhead

Webhead is a San Antonio-based technology services company with more than 30 years of experience delivering technology, engineering, cybersecurity, and digital solutions for federal, state, and commercial clients.

Webhead is currently rebuilding and restructuring its operations while actively pursuing new business and preparing for its next phase of growth. We are seeking talented professionals who want to contribute to meaningful client work while helping strengthen the company’s technical capabilities and delivery practices.