Job description

Torch Technologies Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation’s top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: “Lighting the Pathway of Freedom”. And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us! Torch Technologies is seeking a Cloud & DevSecOps Engineer to build and automate the infrastructure pipelines that power J7 JTSD s Azure environments. Based out of Suffolk, VA or Huntsville, AL, you will work in tandem with NIWC and contractor architects to eliminate manual provisioning by coding infrastructure, automated configuration baselines, and CI/CD security validation As a Cloud & DevSecOps Engineer your duties will include the following, but are not limited to: Write, test, and maintain production-grade Infrastructure as Code using Terraform, Azure Bicep, and Ansible. Implement automated operating system hardening playbooks (DISA STIG compliance) for Red Hat Enterprise Linux and Windows Server virtual machines. Construct secure CI/CD pipelines in Azure DevOps to automate code vulnerability scans, static code analysis (SonarQube), and IaC policy enforcement. Deploy and manage containerized application workloads utilizing Azure Kubernetes Service (AKS) and Azure Container Registry. Automate continuous monitoring agents, log collection forwarders, and security telemetry routing to SIEM solutions. Qualifications U.S. Citizenship Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or related technical field (or equivalent work experience) 5 years of progressive engineering experience (or 3 years with a Master’s degree) Active Secret level DOW clearance Minimum 2 years writing and maintaining production Terraform configurations or Azure Bicep / ARM templates. Hands-on experience developing Ansible playbooks for OS configuration, application deployment, or hardening. Minimum 2 years managing virtual networks, virtual machines, and storage accounts in Microsoft Azure. Current DoD 8570/8140 IAT Level II certification (e.g., Security CE, CySA , or CCNA Security) Strong problem‑solving skills and ability to troubleshoot complex issues Effective communication and collaboration skills Preferred Qualifications Active Top Secret clearance with SCI eligibility. Microsoft Certified: Azure Administrator Associate (AZ-104) and/or DevOps Engineer Expert (AZ-400); HashiCorp Certified: Terraform Associate. Demonstrable experience automating DISA STIG remediation across RHEL 8/9 and Windows Server using Ansible or PowerShell DSC. Practical experience integrating automated security gates (Trivy, Checkov, SonarQube, Prisma Cloud) into Azure DevOps or GitLab CI pipelines. Direct experience deploying and operating production Azure Kubernetes Service (AKS) clusters in government-regulated environments. Strong technical documentation, briefing, and reporting experience Schedule: M-F; 8-5 Work Location: Suffolk, VA or Huntsville, AL – Hybrid / Flexible On-Site. Travel: Yes, 0-10% Relocation Assistance Available: No Position Contingent Upon Award of Contract: No Salary Range for VA: $135,000-$155,000 The salary range information is a general guideline only. Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate’s qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications. #LI-DK1 Benefits: Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.  Applying to Torch Technologies: Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. Torch Technologies, Inc. participates in E-Verify. If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Careers Link as a result of your disability. You can request reasonable accommodations by sending an email to HR torchtechnologies.com. Thank you for your interest in Torch Technologies.

Requirements

Must-haves

Torch Technologies
As a Cloud & DevSecOps Engineer your duties will include the following, but are not limited to:
Write, test, and maintain production-grade Infrastructure as Code using Terraform, Azure Bicep, and Ansible.
Implement automated operating system hardening playbooks (DISA STIG compliance) for Red Hat Enterprise Linux and Windows Server virtual machines.
Construct secure CI/CD pipelines in Azure DevOps to automate code vulnerability scans, static code analysis (SonarQube), and IaC policy enforcement.
Deploy and manage containerized application workloads utilizing Azure Kubernetes Service (AKS) and Azure Container Registry.
Automate continuous monitoring agents, log collection forwarders, and security telemetry routing to SIEM solutions.
U.S. Citizenship
Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or related technical field (or equivalent work experience)
5 years of progressive engineering experience (or 3 years with a Master’s degree)
Active Secret level DOW clearance
Minimum 2 years writing and maintaining production Terraform configurations or Azure Bicep / ARM templates.
Hands-on experience developing Ansible playbooks for OS configuration, application deployment, or hardening.

Nice-to-haves

Active Top Secret clearance with SCI eligibility.
Microsoft Certified: Azure Administrator Associate (AZ-104) and/or DevOps Engineer Expert (AZ-400); HashiCorp Certified: Terraform Associate.
Demonstrable experience automating DISA STIG remediation across RHEL 8/9 and Windows Server using Ansible or PowerShell DSC.
Practical experience integrating automated security gates (Trivy, Checkov, SonarQube, Prisma Cloud) into Azure DevOps or GitLab CI pipelines.
Direct experience deploying and operating production Azure Kubernetes Service (AKS) clusters in government-regulated environments.
Strong technical documentation, briefing, and reporting experience
Schedule: M-F; 8-5
Work Location: Suffolk, VA or Huntsville, AL – Hybrid / Flexible On-Site.
Travel: Yes, 0-10%
Relocation Assistance Available: No
Position Contingent Upon Award of Contract: No

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureci/cdkubernetes

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off