DevSecOps Engineer (TS/SCI Clearance Required)

<p><strong>***Active TS clearance required; must be eligible for CI Polygraph. Applicants without an active TS clearance will not be considered.. ***</strong></p> <p>North Point Technology is looking to hire a Security / IAM Architect to design and implement identity and security architecture across AWS GovCloud and ADC (C2S/SC2S) environments. The qualified candidate must have an active TS/SCI security clearance and will build least-privilege access models, encryption strategies, and security guardrails that meet federal and Intelligence Community standards in air-gapped, classified environments. The ideal candidate combines deep AWS security expertise with hands-on experience navigating ATO and accreditation processes in a DoD/IC setting.</p> <p><strong>Responsibilities:</strong></p> <p>This position centers on architecting and implementing identity and access management across AWS GovCloud and ADC (C2S/SC2S) environments, including IAM policies, roles, and permission boundaries. The architect will design identity federation, CAC/PIV authentication, and least-privilege access models, and stand up security guardrails using Service Control Policies, AWS Config, and Security Hub within isolated regions. Additional work includes designing encryption and data-protection strategies, architecting network security for classified environments, and supporting ATO processes - preparing SSP documentation, remediating POA&amp;M items, and activating continuous monitoring - to maintain a strong security and compliance posture.</p> <p><strong>Required Skills/Experience::</strong></p> <p>&nbsp;</p> <ul> <li class="font-claude-response-body break-words whitespace-normal">AM policy, role, and permission boundary design in AWS GovCloud and ADC (C2S/SC2S) environments</li> <li class="font-claude-response-body break-words whitespace-normal">Identity federation, CAC/PIV authentication, and least-privilege access models aligned with NIST 800-53 and ICD 503</li> <li class="font-claude-response-body break-words whitespace-normal">Security guardrails using Service Control Policies (SCPs), AWS Config, and Security Hub in air-gapped/isolated regions</li> <li class="font-claude-response-body break-words whitespace-normal">Encryption strategy using AWS KMS with FIPS 140-2/3 validated modules, secrets management, and data-at-rest and in-transit protection</li> <li class="font-claude-response-body break-words whitespace-normal">ATO processes, including SSP documentation, POA&amp;M remediation, and continuous monitoring</li> <li class="font-claude-response-body break-words whitespace-normal">Network security in classified environments, including VPC segmentation, cross-domain solutions, PrivateLink, and security groups</li> </ul> <p><strong>Qualifications:</strong></p> <ul> <li>Active Top Secret/SCI security clearance</li> </ul><div class="content-conclusion"><p>North Point Technology is <strong>THE BEST </strong>place to work for curious-minded engineers motivated to support our country’s most crucial missions!&nbsp; We focus on long term projects, leveraging the latest technology in support of innovative solutions to solve our customer’s most difficult problems.</p> <p>At North Point Technology, EMPLOYEES come first!&nbsp; We value our employees by providing excellent compensation, benefits, and a flexible work-life balance. We strive for a close-knit and open atmosphere where the owners are always directly available to our team members.<strong>&nbsp;</strong></p> <p><strong>Come join us!</strong> <strong>Apply with North Point Technology today!&nbsp;</strong></p> <p><em>For positions requiring a federal security clearance, your clearance level must be clearly identified on your resume.</em></p></div>