Automation & AI Engineer
About the role
ECS is seeking an Automation Engineer to support a Department of Defense (DoD) program onsite in Fairfax, VA office. ECS is seeking an experienced, mission-focused Automation Engineer to join an engineering team responsible for a hybrid environment spanning Amazon Web Services (AWS) GovCloud, Microsoft Azure Government, and on-premises data center infrastructure. The Automation Engineer will design, build, and maintain the program's automation capabilities, including infrastructure as code, configuration management, compliance workflow automation, and GitHub-based delivery pipelines. This role will reduce manual effort, improve consistency, and ensure that infrastructure and compliance changes are reviewed, versioned, tested, repeatable, and auditable in accordance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) and Risk Management Framework (RMF) guidelines.
Responsibilities
- Automate patch orchestration, DISA STIG hardening, configuration validation, and drift remediation for Windows and Linux systems.
- Develop Python tools that automate operational and cybersecurity compliance workflows, including parsing and generating STIG Checklist (CKL) files; consuming ACAS and Nessus exports; tracking IAVM and POA&M status; and producing scheduled reports and dashboards.
- Design, develop, and maintain reusable Terraform modules for AWS GovCloud and Azure Government compute, networking, identity and access management, storage, and monitoring resources.
- Bring existing manually provisioned infrastructure under version control and infrastructure-as-code management without disrupt