{"id":1491341,"url":"https://alion.io/job/american-systems-senior-cloud-systems-administrator-devsecops-security-engineer","title":"Senior Cloud Systems Administrator / DevSecOps Security Engineer","company":{"id":1945647,"name":"AMERICAN SYSTEMS","domain":"americansystems.com","url":"https://alion.io/company/american-systems","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Alexandria, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":195000,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":11,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Docker","optional":false},{"name":"GitLab","optional":false},{"name":"Grafana","optional":false},{"name":"GraphQL","optional":false},{"name":"Helm","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Nessus","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Red Hat","optional":false},{"name":"Rest API","optional":false},{"name":"SBOM","optional":false},{"name":"SharePoint","optional":false},{"name":"Splunk","optional":false},{"name":"SRE","optional":false},{"name":"Ubuntu","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-30T00:45:45Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-09-30T10:32:39Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Overview\nAMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Engineering & Analysis, Test & Evaluation, and Training.\nResponsibilities\nOperate, sustain, automate, continuously improve, and secure DTE&A Data Management Platform (DDMP) environments across development, test, training, and production, with emphasis on availability, configuration compliance, observability, release support, and user-impacting operational excellence. This hybrid role combines senior system administration, site reliability engineering, cloud operations, DevSecOps, cybersecurity engineering, and RMF/ATO support for an IL5 CUI system.\nKey Responsibilities\nAdminister and sustain DDMP cloud environments across Development, Test, Training, and Production.\nOperate the managed Kubernetes environment supporting DDMP containerized application services, including deployment support, capacity monitoring, auto-scaling, patching, upgrades, and incident troubleshooting.\nMaintain cloud infrastructure, networking, storage, managed databases, integrations, service endpoints, certificates, and DNS in accordance with approved architecture and security baselines.\nSupport the transition from the current VDI-hosted Linux/Windows server model to an elastic, multi-AZ, cloud-native platform.\nMaintain backup, recovery, high-availability, disaster-recovery, and restore-validation procedures for application, database, configuration, and infrastructure assets.\nMonitor availability, latency, performance, capacity, backup success, error rates, deployment health, and cloud-resource utilization.\nDevelop operational dashboards and service-level metrics to support mission leadership and platform engineering decisions.\nAdminister, maintain, and improve CI/CD pipelines for application, infrastructure, database, and configuration releases.\nImplement repeatable, auditable deployment and rollback procedures for Test, Training, and Production environments.\nEmbed automated security checks into CI/CD pipelines, including source-code, dependency, secrets, container-image, IaC, and vulnerability scanning.\nMaintain secure artifact repositories, container registries, versioned configuration baselines, deployment manifests, and release evidence.\nServe as the technical cybersecurity operations lead for DDMP, partnering with the cloud architect and program security stakeholders.\nImplement and maintain cloud IAM, Kubernetes RBAC, least-privilege access, service identities, secrets management, encryption, key management, and privileged-access controls.\nOperate continuous security monitoring, centralized audit logging, threat detection, security alerting, and vulnerability-management processes.\nCoordinate ACAS/Nessus scans, assess findings, validate remediation, document false positives or mitigations, and manage vulnerabilities through closure.\nApply, validate, document, and sustain required DISA STIG and SRG configurations for operating systems, containers, Kubernetes, databases, applications, and supporting infrastructure.\nSupport RMF and ATO activities by collecting, organizing, and maintaining technical evidence for implemented controls and continuous monitoring.\nMaintain POA&M items, security risk registers, remediation plans, and compliance status reports.\nQualifications\nBS Degree\n11+ years of progressively responsible experience in systems administration, cloud operations, DevSecOps, cybersecurity engineering, site reliability engineering, or a comparable infrastructure/security discipline.\n3+ years of experience operating cloud-hosted, containerized, or hybrid enterprise applications in production.\nStrong Linux systems-administration experience, preferably Ubuntu and Red Hat Enterprise Linux or derivatives; working knowledge of Windows Server is required for transition from the current DDMP state.\nTop Secret Clearance with SCI eligibility\nProven hands-on experience administering Docker and Kubernetes, including, cluster and workload operations; Namespace, RBAC, resource quota, ingress, storage, and network-policy management; Helm or equivalent package/deployment tooling; pod, node, container, certificate, networking, and deployment troubleshooting; and upgrade, patching, backup, recovery, scaling, and availability procedures.\nDirect experience supporting a DoD IL5 environment, a DISA-hosted service, NIPRNET-connected workloads, or a system operating under a DoW ATO.\nExperience supporting CAC/PKI-based authentication, ICAM federation, certificate lifecycle management, and zero-trust access patterns.\nExperience performing or supporting ISSO, ISSM, SCA-V, security-control assessor, ATO, or continuous-monitoring functions.\nExperience developing or maintaining RMF artifacts, including, System Security Plan; Control Implementation statements; Control Inheritance matrices; Security Assessment evidence; POA&Ms; Continuous-monitoring Strategy; Incident-response Plan; and Contingency Plan and Disaster-recovery Test evidence.\nExperience with eMASS or another DoW governance, risk, and compliance system.\nExperience with GitLab security capabilities or equivalent tools for static application security testing, dynamic application security testing, software composition analysis, secrets detection, container image scanning, infrastructure-as-code scanning, and SBOM generation and software supply-chain controls.\nExperience implementing Kubernetes security controls, including workload identity, pod-security standards, admission control, image provenance, runtime protection, network segmentation, and audit logging.\nExperience with Splunk, Elastic, Prometheus, Grafana, OpenTelemetry, cloud-native monitoring, or comparable observability platforms.\nExperience administering PostgreSQL, including backup and restoration validation, maintenance, performance triage, replication monitoring, access controls, and encryption.\nExperience securing API gateways, REST/GraphQL APIs, API tokens, service-to-service authentication, and external-system integrations.\nExperience supporting Microsoft 365/SharePoint Online integrations, especially where SharePoint serves as an authoritative artifact repository.\nFamiliarity with the security considerations for managed AI/LLM services, including CUI/data-boundary protection, access controls, audit logging, prompt/data retention, output validation, and human-in-the-loop decision processes.\nExperience with ITIL-aligned incident, problem, change, configuration, and service-level management.\nPay Transparency Statement\nAMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $135,000.00/Yr. - USD $195,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.EEO Statement\nEEO Race/Sex/Disability Status/Veteran Status","description_format":"text","description_chars":7149,"description_truncated":false,"requirements":{"experience_years_min":11,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Cybersecurity","Military","Human Resources"],"lifecycle":[{"event":"open","at":"2026-09-30T00:45:45Z"}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:4","win:early","comp:brand"],"computed_at":"2026-09-30T05:45:00Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":true},"html_url":"https://alion.io/job/american-systems-senior-cloud-systems-administrator-devsecops-security-engineer","json_url":"https://alion.io/job/american-systems-senior-cloud-systems-administrator-devsecops-security-engineer.json","meta":{"generated_at":"2026-10-01T04:38:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4092,"day_limit":5000,"remaining_today":908,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}