DevSecOps / Cloud Engineer

About the role

Lucayan Technology Solutions LLC is seeking a DevSecOps / Cloud Engineer to support CI/CD pipeline automation, STIG compliance automation, and cloud migration for a federal government IT program supporting the U.S. Army Corps of Engineers (USACE), Walla Walla District. You will support the migration of legacy on-premises applications to the USACE CWBI Cloud environment while automating security scanning and remediation workflows across the development pipeline.

Responsibilities

• Build and maintain CI/CD pipelines within the designated CWBI GitHub Enterprise environment
• Automate DoD STIG compliance checks and vulnerability scanning (ACAS/SCAP) across the development pipeline; import results into DISA STIG Viewer and eMASS
• Support vulnerability remediation efforts in accordance with required timelines (Critical/High: immediate; Moderate: 60 days; Low: 120 days)
• Support migration of applications from on-premises hosting to the USACE CWBI Cloud, following a Cloud-Smart paradigm
• Architect solutions using the highest possible abstraction of cloud services (e.g., SaaS, PaaS) and microservices where feasible
• Deploy applications using CWBI PMO-approved hardened images, with a preference for Iron Bank images
• Support inventory, risk-tagging, and documentation of AI/ML systems, models, and datasets in the Civil Works Data Catalog, including model cards and data lineage records
• Ensure all AI/ML development and training occurs within the RMF-authorized AWS GovCloud environment, handling CUI in accordance with policy
• Coordinate with the CWBI support team to implement standardized identity providers (Login.gov, OpenID, Keycloak)
• Participate in two-week Agile sprint cycles and contribute to release planning and demonstrations

Requirements

• U.S. Citizenship required
• Minimum active Tier 1 (or higher) federal background investigation, favorably adjudicated, prior to start
• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• Minimum 5-7 years of experience in DevSecOps, cloud engineering, or information security
• Experience with modern DevSecOps pipelines and tools, including code repositories like GitHub
• Experience with cloud architecture, migration, and modernization, preferably within AWS GovCloud
• Demonstrated experience implementing secure coding principles and DoD STIGs across a CI/CD pipeline
• Knowledge of implementing and documenting AI/ML solutions in accordance with DoD governance principles

Qualifications

• Experience with microservices architecture and hardened/Iron Bank container images
• Federal government or DoD cloud/cybersecurity program background
• AWS certification (e.g., Solutions Architect, Security Specialty)
• Familiarity with data cataloging standards (Dublin Core, OpenAPI)
• Active Tier 1+ background investigation prior to start
• CompTIA Security+ or DoD 8140-approved equivalent required within six (6) months of contract start
• (ISC)² CISSP or EC-Council Certified DevSecOps Engineer (ECDE) desired for senior/lead roles