Role: DevSecOps Engineer
Work location: Huntsville, Alabama
.
Responsibilities
The core of this position involves a mix of cloud infrastructure management, local classroom administration, security operations, endpoint management, and compliance tracking.
On the infrastructure side, the role requires architecting, deploying, and managing AWS resources.
This includes provisioning EC2 instances, setting up subnets, and building automated deployment pipelines.
In addition to cloud environments, this engineer will physically and logically support local classroom setups, maintaining on-premises hardware and ensuring localized training systems are operational and secure.
This work is paired with managing the Active Directory environment, handling general user and computer management, and establishing integrations between our identity systems and the AWS cloud.
Additionally, this engineer will oversee our mobile device management (MDM) platform, ensuring that all ERDs, tablets, and remote endpoints are properly enrolled, monitored, and secured with configuration policies.
Beyond infrastructure and endpoints, active defense and vulnerability management are critical day-to-day tasks.
The engineer is responsible for hardening EC2 instances, the broader cloud architecture, local classroom workstations, and all managed mobile devices against potential threats.
This includes routinely running ACAS and DISA STIG scans, analyzing the results, and taking the initiative to patch, fix, and remediate any vulnerabilities found during those scans across cloud, physical servers, and mobile platforms.
Finally, the role requires drafting, managing, and updating critical system documentation directly mapped to NIST SP 800-171 and NIST SP 800-53 standards, ensuring all regulatory and audit obligations are consistently met.
Qualifications
A strong technical foundation in both systems administration and hybrid cloud/on-premise environments is required for this position.
Candidates must have hands-on experience administering Active Directory and enterprise MDM solutions, alongside a practical understanding of AWS services (EC2, networking, pipelines) and local physical network topologies used in classroom or closed-network settings.
A deep understanding of federal compliance frameworks is also critical, particularly working with NIST 800-171 and NIST 800-53.
The successful candidate must have direct experience using vulnerability assessment tools like ACAS and applying DISA STIGs to secure operating systems, network infrastructure, and mobile endpoints.
It is not enough to just identify vulnerabilities; candidates need a strong operational track record of engineering solutions, applying patches, enforcing endpoint policies, and successfully fixing those findings across both cloud and physical infrastructure.
Finally, to meet the baseline compliance standards for this position, applicants must hold at least a Bachelor's degree as well as an active CompTIA Security+ certification.
