> Markdown version of [/jobs/ext/267692-cloud-security-engineer-devsecops-engineer-iii-aws-onsite-washington-dc-20534-public-trust](https://www.wearedevelopers.com/jobs/ext/267692-cloud-security-engineer-devsecops-engineer-iii-aws-onsite-washington-dc-20534-public-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer / DevSecOps Engineer III (AWS | Onsite Washington DC 20534 | Public Trust) - **Company:** Goal-Oriented Human Performance Technologies, LLC - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Amazon Cloudfront, Amazon S3, User Authentication, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cloud Foundry, Continuous Integration, Linux, Infrastructure as a Service (IaaS), Identity and Access Management, Network Architecture, Zero Trust Network Access, Software Vulnerability Management, Cloud Platform System, Software Security, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Cloudformation, Data Lakes, Kubernetes, Infrastructure Automation Frameworks, Information Technology, Nessus, Fortinet, Api Gateway, Splunk, Devsecops, Docker, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** May 20, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=14ce5b694bffc532 ## About the Role Do you have experience in Vulnerability scanning?, Do you have a Bachelor's degree?, * Bachelor's degree * Minimum 5 years of IT experience, including demonstrated experience with: * AWS * Cloud-native architectures * VPC design * Security Groups * IAM * Docker * KMS * S3 Encryption * RDS Encryption * HTTPS * SSL Certificates * Data Lake security * CloudFormation * CloudFront * API Gateway * Lambda * Authentication * Data protection * Security automation * Experience supporting: * Infrastructure-as-Code (IaC) * Infrastructure-as-a-Service (IaaS) * Platform-as-a-Service (PaaS) * Software-as-a-Service (SaaS) * Experience developing and supporting secure CI/CD environments on Linux platforms * Demonstrated experience implementing cloud security controls within AWS environments * Experience working with compliance and regulatory requirements within cloud environments * Experience working in risk-based environments including mitigation planning and implementation * Hands-on experience with: * Splunk * Nessus * Tenable Security Center * Firewall platforms such as: * Palo Alto * Imperva * Fortinet Required certifications (minimum one required from the following list): * CISSP * CAP * CISA * CRISC * CISM * CGEIT Preferred Qualifications * DOJ or Bureau of Prisons experience * AWS certifications * FedRAMP experience * Experience supporting multi-account cloud environments * Experience supporting Zero Trust initiatives * Experience with container security and orchestration platforms * Experience with SOAR and security automation tools ## Description GoHPT (Goal-Oriented Human Performance Technologies, LLC) is seeking an experienced Cloud Security Engineer (Cloud DevSecOps Engineer III) to support a federal cybersecurity program focused on securing and modernizing enterprise cloud environments supporting mission-critical systems. This position supports a federal environment responsible for cloud security engineering, secure application deployment, infrastructure automation, vulnerability management, and continuous monitoring activities across cloud-hosted systems and applications. The selected individual will work directly with engineering teams, cybersecurity staff, and government stakeholders to implement secure cloud solutions while integrating security throughout the development lifecycle. This role requires onsite support in Washington, DC (20534). Remote work is not available. Responsibilities * Design, implement, and maintain secure cloud solutions supporting federal systems and applications * Integrate security controls throughout the DevSecOps lifecycle * Support secure deployment and automation of cloud infrastructure and services * Develop and maintain Infrastructure-as-Code (IaC) solutions * Implement and manage secure cloud networking architectures including: * VPCs * Security Groups * Identity and Access Management (IAM) * Domain segmentation * Egress controls * API security * Configure and maintain cloud security capabilities including: * Encryption at rest and in transit * KMS * SSL/TLS certificates * Data protection controls * Support CI/CD pipeline security and automation efforts * Review and analyze vulnerability findings and security events * Support remediation of identified security findings * Support cloud compliance and continuous monitoring activities * Participate in architecture reviews and security assessments, Goal-Oriented Human Performance Technologies (GoHPT) delivers cybersecurity, cloud, and enterprise IT services supporting federal agencies and mission partners. Our teams help agencies improve security posture, manage risk, modernize technology environments, and deliver secure mission outcomes. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)