DevSecOps Engineer

Responsibilities

• Architect and implement identity and access management across AWS GovCloud and ADC (C2S/SC2S) environments
• Design IAM policies, roles, permission boundaries, identity federation, and CAC/PIV authentication
• Implement security guardrails using Service Control Policies (SCPs), AWS Config, and Security Hub
• Design encryption and data-protection strategies using AWS KMS with FIPS 140-2/3 validated modules
• Support ATO processes including SSP documentation, POA&M remediation, and continuous monitoring
• Architect network security for classified environments including VPC segmentation and cross-domain solutions

Requirements

• Active Top Secret/SCI security clearance
• Experience with IAM policy, role, and permission boundary design in AWS GovCloud and ADC
• Knowledge of identity federation and least-privilege access models aligned with NIST 800-53 and ICD 503
• Experience with AWS KMS, secrets management, and data protection
• Familiarity with ATO processes, SSP documentation, and POA&M remediation
• Experience with network security in classified environments (VPC segmentation, PrivateLink, etc.)

About the Company

North Point Technology focuses on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems in support of crucial national missions.