[Hiring] Mid-Level Security Automation Engineer @DecisionPoint

Role Description

DecisionPoint is seeking a skilled Mid-Level Security Automation Engineer to join our Cloud Services (CS) team. In this role, you will help maintain and enhance the ARTRANS AWS cloud environments and DevSecOps platform.

You will implement and manage security controls for ARTRANS DevSecOps pipelines and AWS GovCloud accounts, ensuring compliance with NIST SP 800-53 Rev 5 through the Risk Management Framework (RMF). Additionally, you will integrate RMF requirements and associated security controls into the DevSecOps pipeline to enable continuous security and compliance across Programs of Record. This position is fully remote and requires an active Secret clearance.

Duties & Responsibilities

• Manage and optimize AWS GovCloud infrastructure using Terraform.
• Utilize Terraform, Helm, and YAML manifests to deploy and update infrastructure, platform services, and application configurations.
• Identify and remediate findings in AWS Security Hub.
• Execute infrastructure changes via approved code repositories and CI/CD pipelines.
• Develop solutions for RMF risk assessments and create Plans of Action and Milestones (POA&Ms).
• Embed security controls within Infrastructure as Code (IaC) and Configuration as Code (CaC) processes.
• Recommend effective courses of action for risk mitigation.
• Assess and recommend tools and platform features to support compliance with Zero Trust architecture and RMF security requirements.
• Detect and remediate configuration drift in Terraform, Helm, Kubernetes, and AWS environments.

Qualifications

• Active Secret clearance is required.
• Associate degree with at least 6 years of related experience, or 8 years of continuous related work experience in lieu of a degree.
• Possess a DCWF 8140, IAT Level II certification, such as Security+ CE.
• Strong understanding of AWS GovCloud environments.
• Demonstrated proficiency with Terraform, Helm, YAML, and Kubernetes.
• Experience with AWS Security Hub and remediation of cloud-security findings.