Job description

We are looking for a DevSecOps Engineer to bridge the gap between our cloud infrastructure, on-premise training environments, and our cybersecurity operations. This role focuses heavily on maintaining both functionality and security across our technical environments, spanning from backend servers and AWS cloud initiatives to localized physical classroom setups and end-user devices. The position takes ownership of general systems administration, including daily Active Directory management, enterprise mobile device management (MDM), and the deployment of physical training hardware, while simultaneously driving our AWS cloud initiatives forward. Because the organization operates in a highly regulated space, a major part of the job involves translating complex security frameworks into actionable technical controls. The ultimate goal of this position is to keep our systems resilient, hardened, and fully compliant with federal security mandates across all infrastructure whether cloud-hosted or locally deployed in closed networks. Responsibilities • The core of this position involves a mix of cloud infrastructure management, local classroom administration, security operations, endpoint management, and compliance tracking. • On the infrastructure side, the role requires architecting, deploying, and managing AWS resources. • This includes provisioning EC2 instances, setting up subnets, and building automated deployment pipelines. • In addition to cloud environments, this engineer will physically and logically support local classroom setups, maintaining on-premises hardware and ensuring localized training systems are operational and secure. • This work is paired with managing the Active Directory environment, handling general user and computer management, and establishing integrations between our identity systems and the AWS cloud. • Additionally, this engineer will oversee our mobile device management (MDM) platform, ensuring that all ERDs, tablets, and remote endpoints are properly enrolled, monitored, and secured with configuration policies. • Beyond infrastructure and endpoints, active defense and vulnerability management are critical day-to-day tasks. • The engineer is responsible for hardening EC2 instances, the broader cloud architecture, local classroom workstations, and all managed mobile devices against potential threats. • This includes routinely running ACAS and DISA STIG scans, analyzing the results, and taking the initiative to patch, fix, and remediate any vulnerabilities found during those scans across cloud, physical servers, and mobile platforms. • Finally, the role requires drafting, managing, and updating critical system documentation directly mapped to NIST SP 800-171 and NIST SP 800-53 standards, ensuring all regulatory and audit obligations are consistently met. Qualifications • A strong technical foundation in both systems administration and hybrid cloud/on-premise environments is required for this position. • Candidates must have hands-on experience administering Active Directory and enterprise MDM solutions, alongside a practical understanding of AWS services (EC2, networking, pipelines) and local physical network topologies used in classroom or closed-network settings. • A deep understanding of federal compliance frameworks is also critical, particularly working with NIST 800-171 and NIST 800-53. • The successful candidate must have direct experience using vulnerability assessment tools like ACAS and applying DISA STIGs to secure operating systems, network infrastructure, and mobile endpoints. • It is not enough to just identify vulnerabilities; candidates need a strong operational track record of engineering solutions, applying patches, enforcing endpoint policies, and successfully fixing those findings across both cloud and physical infrastructure. • Finally, to meet the baseline compliance standards for this position, applicants must hold at least a Bachelor's degree as well as an active CompTIA Security+ certification. • Must be a US citizen capable of obtaining and maintaining a Secret Security clearance. Job ID 2026-24936 Work Type On-Site Company Description Work Where it Matters Pinnacle Solutions, an Akima company, is not just another federal contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. At Pinnacle Solutions , the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. For our shareholders, Pinnacle Solutions provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. For our government customers, Pinnacle Solutions delivers comprehensive services for general construction and renovation, as well as civil and marine construction. As a Pinnacle Solutions employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.

Requirements

Must-haves

The core of this position involves a mix of cloud infrastructure management, local classroom administration, security operations, endpoint management, and compliance tracking.
On the infrastructure side, the role requires architecting, deploying, and managing AWS resources.
This includes provisioning EC2 instances, setting up subnets, and building automated deployment pipelines.
In addition to cloud environments, this engineer will physically and logically support local classroom setups, maintaining on-premises hardware and ensuring localized training systems are operational and secure.
This work is paired with managing the Active Directory environment, handling general user and computer management, and establishing integrations between our identity systems and the AWS cloud.
Additionally, this engineer will oversee our mobile device management (MDM) platform, ensuring that all ERDs, tablets, and remote endpoints are properly enrolled, monitored, and secured with configuration policies.
Beyond infrastructure and endpoints, active defense and vulnerability management are critical day-to-day tasks.
The engineer is responsible for hardening EC2 instances, the broader cloud architecture, local classroom workstations, and all managed mobile devices against potential threats.
A strong technical foundation in both systems administration and hybrid cloud/on-premise environments is required for this position.
A deep understanding of federal compliance frameworks is also critical, particularly working with NIST 800-171 and NIST 800-53.
The successful candidate must have direct experience using vulnerability assessment tools like ACAS and applying DISA STIGs to secure operating systems, network infrastructure, and mobile endpoints.
Finally, to meet the baseline compliance standards for this position, applicants must hold at least a Bachelor's degree as well as an active CompTIA Security+ certification.
Must be a US citizen capable of obtaining and maintaining a Secret Security clearance.
Company Description
Work Where it Matters
At Pinnacle Solutions , the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.
For our shareholders, Pinnacle Solutions provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.
For our government customers, Pinnacle Solutions delivers comprehensive services for general construction and renovation, as well as civil and marine construction.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aws

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Vision