Cloud Security Engineer / DevSecOps Engineer III (AWS | Onsite Washington DC 20534 | Public Trust)

GoHPT (Goal-Oriented Human Performance Technologies, LLC) is seeking an experienced Cloud Security Engineer (Cloud DevSecOps Engineer III) to support a federal cybersecurity program focused on securing and modernizing enterprise cloud environments supporting mission-critical systems.

This position supports a federal environment responsible for cloud security engineering, secure application deployment, infrastructure automation, vulnerability management, and continuous monitoring activities across cloud-hosted systems and applications. The selected individual will work directly with engineering teams, cybersecurity staff, and government stakeholders to implement secure cloud solutions while integrating security throughout the development lifecycle.

This role requires onsite support in Washington, DC (20534). Remote work is not available.

Responsibilities

• Design, implement, and maintain secure cloud solutions supporting federal systems and applications
• Integrate security controls throughout the DevSecOps lifecycle
• Support secure deployment and automation of cloud infrastructure and services
• Develop and maintain Infrastructure-as-Code (IaC) solutions
• Implement and manage secure cloud networking architectures including:
• VPCs
• Security Groups
• Identity and Access Management (IAM)
• Domain segmentation
• Egress controls
• API security
• Configure and maintain cloud security capabilities including:
• Encryption at rest and in transit
• KMS
• SSL/TLS certificates
• Data protection controls
• Support CI/CD pipeline security and automation efforts
• Review and analyze vulnerability findings and security events
• Support remediation of identified security findings
• Support cloud compliance and continuous monitoring activities
• Participate in architecture reviews and security assessments, Goal-Oriented Human Performance Technologies (GoHPT) delivers cybersecurity, cloud, and enterprise IT services supporting federal agencies and mission partners. Our teams help agencies improve security posture, manage risk, modernize technology environments, and deliver secure mission outcomes.

Do you have experience in Vulnerability scanning?, Do you have a Bachelor’s degree?, * Bachelor’s degree

• Minimum 5 years of IT experience, including demonstrated experience with:
• AWS
• Cloud-native architectures
• VPC design
• Security Groups
• IAM
• Docker
• KMS
• S3 Encryption
• RDS Encryption
• HTTPS
• SSL Certificates
• Data Lake security
• CloudFormation
• CloudFront
• API Gateway
• Lambda
• Authentication
• Data protection
• Security automation
• Experience supporting:
• Infrastructure-as-Code (IaC)
• Infrastructure-as-a-Service (IaaS)
• Platform-as-a-Service (PaaS)
• Software-as-a-Service (SaaS)
• Experience developing and supporting secure CI/CD environments on Linux platforms
• Demonstrated experience implementing cloud security controls within AWS environments
• Experience working with compliance and regulatory requirements within cloud environments
• Experience working in risk-based environments including mitigation planning and implementation
• Hands-on experience with:
• Splunk
• Nessus
• Tenable Security Center
• Firewall platforms such as:
• Palo Alto
• Imperva
• Fortinet

Required certifications (minimum one required from the following list):

• CISSP
• CAP
• CISA
• CRISC
• CISM
• CGEIT

Preferred Qualifications

• DOJ or Bureau of Prisons experience
• AWS certifications
• FedRAMP experience
• Experience supporting multi-account cloud environments
• Experience supporting Zero Trust initiatives
• Experience with container security and orchestration platforms
• Experience with SOAR and security automation tools