North Point Technology
Posted 1mo ago

DevSecOps Engineer (TS/SCI Clearance Required)

North Point Technology
Washington, District of Columbia, United States
HybridFull Time
Responsibilities
  • designing identity
  • implementing guardrails
  • supporting ATO
Requirements
  • Active Top Secret/SCI clearance with CI polygraph eligibility
  • Deep AWS GovCloud/ADC IAM and security experience
  • Knowledge of NIST 800-53/ICD 503
  • Encryption/KMS/FIPS
  • ATO/SSP/POA&M processes, and network security for classified environments
Technical tools mentioned
AWS GovCloudADC (C2S/SC2S)Service Control Policies (SCPs)AWS ConfigSecurity HubAWS KMSPrivateLinkVPC

Job description

***Active TS clearance required; must be eligible for CI Polygraph. Applicants without an active TS clearance will not be considered.. ***

North Point Technology is looking to hire a Security / IAM Architect to design and implement identity and security architecture across AWS GovCloud and ADC (C2S/SC2S) environments. The qualified candidate must have an active TS/SCI security clearance and will build least-privilege access models, encryption strategies, and security guardrails that meet federal and Intelligence Community standards in air-gapped, classified environments. The ideal candidate combines deep AWS security expertise with hands-on experience navigating ATO and accreditation processes in a DoD/IC setting.

Responsibilities:

This position centers on architecting and implementing identity and access management across AWS GovCloud and ADC (C2S/SC2S) environments, including IAM policies, roles, and permission boundaries. The architect will design identity federation, CAC/PIV authentication, and least-privilege access models, and stand up security guardrails using Service Control Policies, AWS Config, and Security Hub within isolated regions. Additional work includes designing encryption and data-protection strategies, architecting network security for classified environments, and supporting ATO processes - preparing SSP documentation, remediating POA&M items, and activating continuous monitoring - to maintain a strong security and compliance posture.

Required Skills/Experience::

 

  • AM policy, role, and permission boundary design in AWS GovCloud and ADC (C2S/SC2S) environments
  • Identity federation, CAC/PIV authentication, and least-privilege access models aligned with NIST 800-53 and ICD 503
  • Security guardrails using Service Control Policies (SCPs), AWS Config, and Security Hub in air-gapped/isolated regions
  • Encryption strategy using AWS KMS with FIPS 140-2/3 validated modules, secrets management, and data-at-rest and in-transit protection
  • ATO processes, including SSP documentation, POA&M remediation, and continuous monitoring
  • Network security in classified environments, including VPC segmentation, cross-domain solutions, PrivateLink, and security groups

Qualifications:

  • Active Top Secret/SCI security clearance

North Point Technology is THE BEST place to work for curious-minded engineers motivated to support our country’s most crucial missions!  We focus on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems.

At North Point Technology, EMPLOYEES come first!  We value our employees by providing excellent compensation, benefits, and a flexible work-life balance. We strive for a close-knit and open atmosphere where the owners are always directly available to our team members. 

Come join us! Apply with North Point Technology today! 

For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.

About North Point Technology

Technology services and engineering for federal government missions.

Similar jobs

DevSecOps Engineer roles near Washington, District of Columbia
1d
Save
Mark Applied
Hide
InfraSec Engineer
Boston or Washington, D.C.
HybridFull Time
Air Space Intelligence
Air Space Intelligence: Provides predictive AI software for aviation and defense operations.
Experience with FedRAMP or DoD controls, cloud security, AWS GovCloud, Azure GCCH or Platform One, Python or Rust, Terraform or Terragrunt, Helm, Kubernetes, and security automation; clearance required or obtainable.
AWS GovCloud, Azure GCCH, Platform One, Python, Rust, Terragrunt, Terraform, Helm, Kubernetes, AWS EKS, OWASP Top 10, SANS Top 25, SOC 2, NIST CSF, FedRAMP
2d
Save
Mark Applied
Hide
DevSecOps Engineer - 4173703
Washington, District of Columbia, United States
$140k-$155k/yr RemoteFull Time
TCG
TCG: Provides IT and management solutions to federal agencies.
5+ YOERequires 5+ years of DevSecOps experience, 3+ years managing AWS ecosystems, Kubernetes and Docker expertise, CI/CD and security tooling experience, and a related bachelor's degree.
AWS, GitLab, Kubernetes, Docker, SAST, DAST, SonarQube, Invicti, Tenable, Ansible, Splunk, ELK Stack, Terraform, CloudFormation, Java, Angular, Spring Boot, S3, IAM
2d
Save
Mark Applied
Hide
Senior DevSecOps Engineer
Reston, Virginia, United States
$120k-$160k/yr RemoteFull Time
TIAG
TIAG: Technology and management solutions provider for government and industry.
8+ YOERequires U.S. citizenship, 8+ years of DevSecOps experience, 4+ years of AWS management, NIST and DoD SRG knowledge, Git, and complex cloud architecture experience.
Jenkins, GitHub Actions, AWS, CloudWatch, Splunk, Git, Linux, Terraform, Ansible, SonarQube, PHP
3d
Save
Mark Applied
Hide
Senior Engineer
Arlington or Rome or Hanscom Air Force Base or Tacoma or McLean
$110k-$180k/yr HybridFull Time
Raft
Raft: Builds AI and data platforms for U.S. national defense.
3+ YOERequires 3+ years of relevant experience, 3+ years with Docker and Kubernetes, cloud and CI/CD expertise, streaming-platform experience, Infrastructure as Code knowledge, and ability to obtain Security+ certification within 90 days.
Kafka, Kafka Streams, Pinot, Java, Scala, Kubernetes, Docker, AWS, Prometheus, Grafana, Fluent Bit, Kibana, Loki, Terraform, Ansible, GitLab Runners, Helm Charts, Maven, Gradle, NPM, Yarn, Istio, Python, Go
3d
Save
Mark Applied
Hide
Senior DevSecOps Engineer
McLean, Virginia, United States
$150k-$185k/yr OnsiteFull Time
Steampunk
Steampunk: Federal digital transformation and consulting services provider.
5+ YOEBachelor's degree, 5+ years in cloud, Git, programming, DevSecOps, infrastructure as code, CI/CD, and DevSecOps tooling; 3+ years with Docker and Kubernetes; clearance eligibility required.
AWS, Azure, GCP, GitHub, GitLab, Bitbucket, Docker, Kubernetes, Jenkins, GitLab CI/CD, GitHub Actions, CircleCI, Travis CI, Selenium, Concourse, Bash, PowerShell, Python, Groovy, Ruby, Pivotal, Chef, Terraform, CloudFormation, Ansible
6d
Save
Mark Applied
Hide
Junior DevSecOps Engineer
Reston, Virginia, United States
$80k-$90k/yr HybridFull Time
Inadev
Inadev: Provides digital engineering and AI solutions to government and businesses.
3+ YOERequires 3+ years of DevOps/DevSecOps experience, AWS and infrastructure-as-code expertise, CI/CD and security automation experience, and Python or Bash scripting. U.S. citizenship and government clearance eligibility required.
AWS, CodePipeline, CodeBuild, AWS CDK, CloudFormation, Python, Bash, SAST, DAST, SCA, FedRAMP, NIST
1w
Save
Mark Applied
Hide
DevSecOps Engineer (DC, Washington)
Washington, District of Columbia, United States
$160k-$180k/yr OnsiteFull Time
RiVidium
RiVidium: Provides cybersecurity software and IT services to federal agencies.
8+ YOEActive Top Secret clearance, 8 years of IT, endpoint engineering, or cybersecurity experience, and 6+ years of DevSecOps or infrastructure automation experience with named tools and workflows.
Terraform, OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, SAST, DAST, Git
1w
Save
Mark Applied
Hide
DevSecOps Engineer
Alexandria or Seaside
$110k-$149k/yr OnsiteFull Time
VMD Corp
VMD Corp: Provides airport security screening and federal IT services.
3+ YOEBachelor’s degree and 3 years of experience required. U.S. citizenship and active Secret clearance required; experience with application security, vulnerability assessment, secure pipelines, and cybersecurity engineering methods.
DevSecOps, SIPRNet