AWS DevSecOps & Cloud Security Engineer

Join a team building secure cloud capabilities for Air Force and Department of Defense missions. This onsite role in San Antonio, TX supports AWS GovCloud environments and combines cloud security, automation, and DevSecOps practices to deliver resilient mission applications, AI-enabled capabilities, and container platforms.

Compensation: Projected annual range of USD 77,500 to 176,000.

Clearance: Ability to obtain a Secret clearance is required. Selected candidates will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

What you will do

• Develop, manage, and secure cloud-native applications and container platforms supporting Air Force and Department of Defense missions.
• Build automation and security controls that enable reliable deployment of mission applications and AI-enabled capabilities in AWS GovCloud.
• Design secure AWS architectures and translate cybersecurity requirements into automated controls.
• Build and maintain CI/CD pipelines with automated testing, security scanning, and policy enforcement across environments.
• Develop Infrastructure as Code using established tooling.
• Manage and harden containerized workloads.
• Implement identity and access controls, network segmentation, encryption, and secrets management, and establish repeatable deployment processes across environments.
• Deploy and operate AI agent and analytics capabilities while collaborating with software, AI and ML engineers, cybersecurity professionals, architects, and mission stakeholders, including systems built with Agent Foundry, enterprise knowledge and retrieval, data analytics platforms, and computer vision capabilities.
• Support Risk Management Framework (RMF) and Authority to Operate (ATO) activities through technical implementation and evidence generation.
• Implement logging, monitoring, and alerting, and support vulnerability remediation and operational troubleshooting.
• Review architectures, evaluate cloud and container technologies, and mentor engineers on secure development and DevSecOps practices.
• Help move mission capabilities from development into secure, resilient operation.

What you bring

• 5+ years of experience in DevSecOps, cloud engineering, platform engineering, or cybersecurity engineering.
• 3+ years designing, deploying, and securing AWS environments using services such as IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, and AWS Config.
• Infrastructure as Code experience with Terraform, AWS CloudFormation, or AWS CDK.
• CI/CD pipeline experience integrating automated builds, testing, security checks, and releases using GitHub Actions, GitLab, Jenkins, Azure DevOps, or AWS-native services.
• Experience deploying and managing containerized workloads using Docker and Kubernetes.
• Experience incorporating vulnerability management, application and infrastructure security scanning, secrets management, software supply chain security, and compliance checks into delivery workflows.
• Linux system administration and automation experience with Bash or Python.
• Experience partnering with application development and cybersecurity teams across the software development lifecycle, including knowledge of Zero Trust principles and secure-by-design practices.
• Ability to obtain a Secret clearance.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Engineering.

Technologies you may work with

AWS, AWS GovCloud, IAM, VPCs, Security Groups, KMS, CloudTrail, CloudWatch, GuardDuty, Security Hub, AWS Config, Terraform, AWS CloudFormation, AWS CDK, GitHub Actions, GitLab, Jenkins, Azure DevOps, Docker, Kubernetes, Bash, Python

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Recognition awards program
• Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs

Additional context

• Identity verification: During hiring, you will complete an identity verification process leveraging advanced biometrics and artificial intelligence. You are expected to be on camera during interviews and assessments. Booz Allen reserves the right to take your picture to verify identity and prevent fraud.
• Candidate AI usage policy: Using AI or other tools to assist with responses during interviews (in-person or virtual) is prohibited unless permission is explicitly provided.
• Work model: This role is listed as Onsite, with work primarily performed full-time at a customer facility where employees collaborate directly with colleagues and customers as required.
• Non-discrimination: All qualified applicants receive consideration without regard to disability, protected veteran status, or other protected statuses under applicable law.

NICE if you have

• Experience supporting Air Force, Space Force, Department of Defense, or Intelligence Community programs, including work in AWS GovCloud or other regulated Cloud environments.
• Experience supporting RMF and ATO activities and implementing NIST SP 800-53, FedRAMP, DoD Cloud Computing Security Requirements Guide, or STIG requirements.
• Experience with Kubernetes and container security, Amazon EKS, GitOps, Policy-as-Code, or automated compliance validation.
• Experience deploying and operating AI and ML, generative AI, computer vision, or data analytics applications, including MLOps or LLMOps practices.
• Experience with Amazon Bedrock, SageMaker, OpenSearch, vector databases, knowledge graphs, or agentic AI platforms.
• Experience implementing cloud security posture management, continuous monitoring, enterprise observability, or incident response processes.
• Master’s degree in a Technical field.
• AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, or AWS Certified DevOps Engineer – Professional.
• CISSP, Security+, or equivalent cybersecurity certification.