Senior Cloud Systems Administrator – DevSecOps Security Engineer

AMERICAN SYSTEMS

. Operate, sustain, automate, continuously improve, and secure DDMP environments across development, test, training, and production .

Posted 9/29/2026full-timeAlexandria • Virginia • United StatesSenior💰 $135,000 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in cloud operations, DevSecOps, and systems administration, with a strong focus on security practices, container orchestration, and compliance within DoD environments. Proficient in managing Kubernetes and Docker, implementing CI/CD pipelines, and maintaining high-availability cloud infrastructures.

Highest-signal resume keywords

Cloud OperationsKubernetes AdministrationDevSecOps PracticesCybersecurity EngineeringCI/CD Pipeline Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Linux Systems AdministrationDocker AdministrationKubernetes ManagementCI/CD Pipeline DevelopmentBackup and Recovery ProceduresCloud Infrastructure MaintenanceSecurity MonitoringIncident TroubleshootingPostgreSQL AdministrationAPI Security Management

Tools & Technologies

GitLabSplunkPrometheusGrafanaElasticOpenTelemetryHelmEMASSACASNessus

Certifications & Qualifications

Top Secret ClearanceBS Degree

Industry Keywords

DoD IL5 EnvironmentDISA STIGRMFATOCAC/PKI AuthenticationZero-Trust AccessService-Level ManagementContinuous MonitoringIncident ResponseDisaster Recovery

Tech Stack

Tools & technologies

CloudCyber SecurityDNSDockerGrafanaGraphQLKubernetesLinuxNode.jsPostgresPrometheusSplunk

About the role

Key responsibilities & impact

Operate, sustain, automate, continuously improve, and secure DDMP environments across development, test, training, and production
Administer and sustain DDMP cloud environments
Operate managed Kubernetes environments supporting containerized application services
Provide deployment support, capacity monitoring, auto-scaling, patching, upgrades, and incident troubleshooting
Maintain cloud infrastructure, networking, storage, managed databases, integrations, service endpoints, certificates, and DNS
Support transition from VDI-hosted Linux/Windows servers to an elastic, multi-AZ, cloud-native platform
Maintain backup, recovery, high-availability, disaster-recovery, and restore-validation procedures
Monitor availability, latency, performance, capacity, backup success, error rates, deployment health, and cloud-resource utilization
Develop operational dashboards and service-level metrics
Administer and improve CI/CD pipelines for application, infrastructure, database, and configuration releases
Implement repeatable, auditable deployment and rollback procedures
Embed automated security checks into CI/CD pipelines
Maintain secure artifact repositories, container registries, configuration baselines, deployment manifests, and release evidence
Serve as technical cybersecurity operations lead for DDMP
Implement and maintain cloud IAM, Kubernetes RBAC, least-privilege access, service identities, secrets management, encryption, key management, and privileged-access controls
Operate continuous security monitoring, centralized audit logging, threat detection, security alerting, and vulnerability-management processes
Coordinate ACAS/Nessus scans, assess findings, validate remediation, document false positives or mitigations, and manage vulnerabilities through closure
Apply, validate, document, and sustain DISA STIG and SRG configurations
Support RMF and ATO activities by maintaining technical evidence for implemented controls and continuous monitoring
Maintain POA&M items, security risk registers, remediation plans, and compliance status reports

Requirements

What you’ll need

BS Degree
11+ years of progressively responsible experience in systems administration, cloud operations, DevSecOps, cybersecurity engineering, site reliability engineering, or a comparable infrastructure/security discipline
3+ years of experience operating cloud-hosted, containerized, or hybrid enterprise applications in production
Strong Linux systems-administration experience, preferably Ubuntu and Red Hat Enterprise Linux or derivatives
Working knowledge of Windows Server
Top Secret Clearance with SCI eligibility
Proven hands-on experience administering Docker and Kubernetes, including cluster and workload operations, Namespace, RBAC, resource quota, ingress, storage, and network-policy management
Experience with Helm or equivalent package/deployment tooling
Experience with pod, node, container, certificate, networking, and deployment troubleshooting
Experience with upgrade, patching, backup, recovery, scaling, and availability procedures
Direct experience supporting a DoD IL5 environment, a DISA-hosted service, NIPRNET-connected workloads, or a system operating under a DoW ATO
Experience supporting CAC/PKI-based authentication, ICAM federation, certificate lifecycle management, and zero-trust access patterns
Experience performing or supporting ISSO, ISSM, SCA-V, security-control assessor, ATO, or continuous-monitoring functions
Experience developing or maintaining RMF artifacts, including System Security Plan, Control Implementation statements, Control Inheritance matrices, Security Assessment evidence, POA&Ms, Continuous-monitoring Strategy, Incident-response Plan, and Contingency Plan and Disaster-recovery Test evidence
Experience with eMASS or another DoW governance, risk, and compliance system
Experience with GitLab security capabilities or equivalent tools for SAST, DAST, software composition analysis, secrets detection, container image scanning, IaC scanning, SBOM generation, and software supply-chain controls
Experience implementing Kubernetes security controls, including workload identity, pod-security standards, admission control, image provenance, runtime protection, network segmentation, and audit logging
Experience with Splunk, Elastic, Prometheus, Grafana, OpenTelemetry, cloud-native monitoring, or comparable observability platforms
Experience administering PostgreSQL, including backup and restoration validation, maintenance, performance triage, replication monitoring, access controls, and encryption
Experience securing API gateways, REST/GraphQL APIs, API tokens, service-to-service authentication, and external-system integrations
Experience supporting Microsoft 365/SharePoint Online integrations
Familiarity with security considerations for managed AI/LLM services, including CUI/data-boundary protection, access controls, audit logging, prompt/data retention, output validation, and human-in-the-loop decision processes
Experience with ITIL-aligned incident, problem, change, configuration, and service-level management

Benefits

Comp & perks

Healthcare benefits
Paid leave
Retirement plans
Insurance programs
Education and training assistance
Employee ownership