Senior Cloud Systems Administrator / DevSecOps Security Engineer
American Systems · Alexandria, VA, US
About this role
## Overview AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs across **Information Technology, Engineering & Analysis, Test & Evaluation, and Training**. This is a **hybrid senior role** combining **system administration, site reliability engineering, cloud operations, DevSecOps, cybersecurity engineering, and RMF/ATO support** for an **IL5 CUI system**. --- ## Key Responsibilities - **Operate, sustain, automate, continuously improve, and secure** DDMP (DTE&A Data Management Platform) environments across **Development, Test, Training, and Production** with emphasis on: - Availability - Configuration compliance - Observability - Release support - User-impacting operational excellence - Administer and support the **managed Kubernetes environment** (deployment support, capacity monitoring, auto-scaling, patching, upgrades, incident troubleshooting). - Maintain cloud infrastructure and services including **networking, storage, managed databases, integrations, endpoints, certificates, and DNS** aligned to approved architecture and security baselines. - Support transition from **VDI-hosted Linux/Windows** to an **elastic, multi-AZ, cloud-native platform**. - Maintain **backup, recovery, high availability, disaster recovery, and restore-validation** for application, database, configuration, and infrastructure assets. - Monitor and report on **availability, latency, performance, capacity, backup success, error rates, deployment health, and cloud utilization**. - Develop **operational dashboards** and **service-level metrics** to support mission leadership and platform engineering. - Administer and improve **CI/CD pipelines** for application, infrastructure, database, and configuration releases. - Implement **repeatable, auditable deployment and rollback** procedures for Test, Training, and Production. - Embed automated security checks into CI/CD pipelines (e.g., **source code, dependencies, secrets, container images, IaC, vulnerability scanning**). - Maintain secure **artifact repositories**, container registries, versioned configuration baselines, deployment manifests, and release evidence. - Serve as the **technical cybersecurity operations lead** for DDMP in partnership with cloud architecture and program security stakeholders. - Implement and maintain **cloud IAM, Kubernetes RBAC, least-privilege access, service identities, secrets management, encryption/key management, and privileged-access controls**. - Operate **continuous security monitoring**, centralized audit logging, threat detection, security alerting, and vulnerability management. - Coordinate **ACAS/Nessus scans**, validate findings/remediation, document false positives/mitigations, and manage vulnerabilities through closure. - Apply/validate/document/sustain required **DISA STIGs and SRG configurations** across OS, containers, Kubernetes, databases, applications, and supporting infrastructure. - Support **RMF/ATO** by collecting, organizing, and maintaining technical evidence for implemented controls and continuous monitoring. - Maintain **POA&M items**, security risk registers, remediation plans, and compliance status reporting. --- ## Qualifications - **BS Degree** and **11+ years** of progressively responsible experience in systems administration, cloud operations, DevSecOps, cybersecurity engineering, site reliability engineering, or comparable infrastructure/security. - **3+ years** operating **cloud-hos
Listing freshness
CronJobs last confirmed this listing 37m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.