{"id":4190062,"url":"https://alion.io/job/dmi-aws-proserve-platform-engineer","title":"AWS ProServe Platform Engineer","company":{"id":2743519,"name":"DMI","domain":"dminc.com","url":"https://alion.io/company/dminc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McLean, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EventBridge","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CloudFormation","optional":false},{"name":"DynamoDB","optional":false},{"name":"FinOps","optional":false},{"name":"IAM","optional":false},{"name":"PKI","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-11-12T19:12:59Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T19:12:59Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About DMI\nDMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com\nAbout the Opportunity\nMajor duties and responsibilities\nECMA cARMY onboarding\nRun the ECMA intake end to end:o tenant request package and account vendingo Control Tower / Landing Zone Accelerator guardrails within the ECMA baselineo IAM Identity Center federation to the Army identity providero VPN and boundary connectivity requests\nPrepare and track the Government artifacts the program depends on: the Authorizing Official designation memo, the ISSO appointment and the inherited-control matrix.\nUse established working relationships with ECMA, the Authorizing Official and SCA-V to keep reviews moving.\nMaintain a dependency tracker for every Government-paced item, with owner, submission date and escalation path, reported weekly.\nSIPR option: repeat onboarding for IL6, covering the second Authorizing Official chain, SIPR identity binding, the DISA SIPRNet circuit request and classified break-glass access.Landing zone and environments\nDeliver reusable, parameterized landing-zone infrastructure code for cARMY: account baseline, service control policies, centralized CloudTrail/Config/log archive, Security Hub, GuardDuty, network baseline with VPC endpoints, and the KMS key hierarchy. NIPR and SIPR must differ only by parameters.\nStand up NIPR development, test and staging by about month 4, and multi-region production by about month 7. Production includes Global Tables and Route 53 failover, with recovery time and recovery point objectives documented and demonstrated.\nIntegrate with the program's AWS SAM application layer through a defined contract: exported VPC, subnet, endpoint, KMS and logging identifiers. The engagement does not fork or replace the application templates.IL5 boundary, STIG and ATO acceleration\nDefine the IL5 authorization boundary: boundary and data-flow diagrams, ports, protocols and services, and the split of inherited, shared and system-specific controls with cARMY.\nDeliver NIST SP 800-53 Rev. 5 conformance packs and DISA STIG automation for Lambda, API Gateway, DynamoDB and the landing-zone services, with evidence the RMF team can load into eMASS.\nProvide System Security Plan templates pre-filled for cARMY-inherited controls, and support the SSP amendment, eMASS submission and SCA-V coordination.\nSet up DoD PKI certificate distribution and rotation.Continuous ATO\nProvide the continuous-ATO playbook and help stand up the OSCAL/ConMon pipeline: Config and Security Hub feeds, drift detection, the ConMon dashboard and the 30-day evidence period.\nSupport the Authorizing Official signature campaign toward NIPR continuous ATO at month 12.Migration into cARMY\nPlan and execute the move of the demonstrator from the commercial GovCloud account into cARMY: AWS DMS or DynamoDB export and import, cut-over and rollback runbooks, and a full rehearsal. Workloads land in development, test and staging first, then production.Knowledge transfer and exit\nPair with the Lead DevSecOps / SRE throughout. Every artifact is committed to the program repositories, runs through the program pipeline, and is operated at least once by program staff before month 9.\nDeliver runbooks and architecture decision records for every landing-zone design decision.\nQualifications\nRequired\nECMA cARMY onboarding experience: has taken at least one prior Army tenant through ECMA cARMY onboarding to first authenticated deployment. This is the qualification that defines the role.\nGovCloud landing zones at IL5: Control Tower and/or Landing Zone Accelerator, AWS Organizations and service control policies, IAM Identity Center, centralized logging, Security Hub, GuardDuty, AWS Config conformance packs.\nDoD authorization: DoD Cloud Computing SRG, RMF, NIST SP 800-53 Rev. 5 and eMASS, with direct experience of Authorizing Official and SCA-V review cycles. Prior continuous-ATO or ConMon delivery is strongly preferred.\n Infrastructure as code: production-quality CloudFormation / AWS SAM. CDK (Landing Zone Accelerator) or Terraform is acceptable where the output integrates with the SAM application layer.\n Serverless platform depth: Lambda, API Gateway, DynamoDB (Global Tables, point-in-time recovery, Streams, capacity), EventBridge, SQS, KMS, WAF, VPC endpoints, Route 53 failover.\nData migration: AWS DMS and DynamoDB export and import.\nHardening: DISA STIG automation for cloud and serverless resources.\n Experience and education: 10+ years in cloud infrastructure, including 5+ years in AWS GovCloud or DoD environments. Bachelor's in IT, CS or a related field, or equivalent experience.\nCertifications\nAWS Certified SysOps Administrator - Associate or higher is required. This is the labor-category minimum and cannot be waived.\nAWS Certified Solutions Architect - Professional is expected for this engagement.\nAWS Certified Security - Specialty or DevOps Engineer - Professional is preferred.\nThe engineer must be DoD 8140 compliant for the IAT/IAM functions performed.\nPreferred\nPrior SIPR/IL6 (AWS Secret Region) enclave build-out and DISA SIPRNet circuit coordination\nArmy Cross-Domain Solution (ARCDS) familiarity, if cross-domain capability enters scope\nOSCAL tooling and Security Hub-to-eMASS evidence automation\nGovCloud FinOps, tagging and cost-allocation design\nComfort working with an AI-augmented team. Generated infrastructure code and STIG scripts are welcome once reviewed to an ATO-defensible standard.\nMinimum Salary Rate\n$121,600Median Salary Rate\n$152,000Working at DMI\nDMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:\nDo What’s Right - We lead with honesty and integrity.\nOwn the Outcome - We take responsibility and deliver.\nDeliver for Our Customers - We are relentless about delivering value.\nThink Bold, Act Smart - We innovate with purpose.\nWin Together - We collaborate and celebrate our success.\nThese values aren’t just ideals-they show up in how we support every part of your well-being:\nConvenience/Concierge - Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.\nDevelopment - Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.\n Financial - Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.\nRecognition - Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.\nWellness - Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.\nDMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.\n***************** No Agencies Please *****************\nApplicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.","description_format":"text","description_chars":7520,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":["Growth opportunities","Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Help Desk & Service Desk","IT Consulting & Digital Transformation","Managed IT Services (MSP)","Mobile App Development Services"],"lifecycle":[{"event":"open","at":"2026-11-12T19:12:59Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":18,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T21:08:21Z"},"pay":null,"html_url":"https://alion.io/job/dmi-aws-proserve-platform-engineer","json_url":"https://alion.io/job/dmi-aws-proserve-platform-engineer.json","meta":{"generated_at":"2026-11-12T21:08:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":44700,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2743519},"rest":"https://alion.io/mcp/rest/get_company?id=2743519"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdmi-aws-proserve-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdmi-aws-proserve-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdmi-aws-proserve-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dmi-aws-proserve-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdmi-aws-proserve-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4190062}},{"tool":"search_jobs","arguments":{"company":"dminc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4190062},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}