SecDevOps Engineer (Jr.)
Arlington, VA · On-site
... IAM permissions and cloud role policies to ensure alignment with least- privilege models under ... AWS Certified Cloud Practitioner or Solutions Architect (Associate) * HashiCorp Certified:
SecDevOps Engineer (Jr.)
Arlington, VA · On-site
... IAM permissions and cloud role policies to ensure alignment with least- privilege models under ... AWS Certified Cloud Practitioner or Solutions Architect (Associate) * HashiCorp Certified:
SecDevOps Engineer (Jr.)
Washington, DC · On-site
$90 - $110/hr
... across AWS, Azure, and GCP. Operating on-site in Washington, DC, within our FedRAMP-authorized ... Review basic IAM permissions and cloud role policies to ensure alignment with least privilege ...
SecDevOps Engineer (Jr.)
Washington, DC · On-site
$90 - $110/hr
... across AWS, Azure, and GCP. Operating on-site in Washington, DC, within our FedRAMP-authorized ... Review basic IAM permissions and cloud role policies to ensure alignment with least privilege ...
Cloud Systems Administrator I
Albuquerque, NM · On-site
$85K - $125K/yr
Manage user access using IAM frameworks * Enforce least privilege and federal compliance standards ... * Entry-level cloud certifications such as AWS Certified Cloud Practitioner or Microsoft Azure ...
Cloud Systems Administrator I
Albuquerque, NM · On-site
$85K - $125K/yr
Manage user access using IAM frameworks * Enforce least privilege and federal compliance standards ... * Entry-level cloud certifications such as AWS Certified Cloud Practitioner or Microsoft Azure ...
Cloud Systems Administrator with Security Clearance
Albuquerque, NM · On-site
$75K - $130K/yr
... IAM frameworks • Enforce least privilege and federal compliance standards • Support access ... Entry-level cloud certifications such as AWS Certified Cloud Practitioner or Microsoft Azure ...
Cloud Systems Administrator with Security Clearance
Albuquerque, NM · On-site
$75K - $130K/yr
... IAM frameworks • Enforce least privilege and federal compliance standards • Support access ... Entry-level cloud certifications such as AWS Certified Cloud Practitioner or Microsoft Azure ...
Entry Level Aws Iam information
What is an entry level AWS IAM role?
Entry Level AWS IAM roles typically refer to beginner positions focused on managing Identity and Access Management (IAM) within Amazon Web Services (AWS). These roles involve creating and managing user accounts, assigning permissions, and helping ensure the security of cloud resources. Entry-level IAM professionals often assist with setting up policies, troubleshooting access issues, and learning best practices for cloud security. The position is ideal for those new to cloud computing or AWS, looking to build foundational knowledge in cloud security and user management.
What are the key skills and qualifications needed to thrive as an entry level AWS IAM professional?
To thrive as an Entry Level AWS IAM professional, you need a basic understanding of cloud computing concepts, AWS services, and foundational security principles, often demonstrated by an AWS Certified Cloud Practitioner or AWS Certified Solutions Architect – Associate certification. Familiarity with the AWS Management Console, IAM policies, roles, and access management tools is typically required. Attention to detail, problem-solving skills, and the ability to communicate technical concepts clearly are important soft skills in this role. These skills and qualities are essential to ensure secure, compliant, and efficient management of user access and permissions in cloud environments.
What are the most common challenges faced by entry level AWS IAM professionals, and how can they effectively address them?
Entry Level AWS IAM professionals often encounter challenges such as understanding complex permission structures, managing user access at scale, and ensuring compliance with security best practices. Navigating AWS’s detailed policies and roles can be overwhelming at first, so it's important to leverage AWS documentation and tools like IAM Policy Simulator to test and validate permissions. Collaborating closely with more experienced team members and participating in internal security reviews can also help new professionals build confidence and expertise. Continuous learning and hands-on practice with AWS IAM features are key to overcoming these challenges.
What is the difference between Entry Level Aws Iam vs Entry Level Aws Cloud Practitioner?
| Aspect | Entry Level Aws Iam | Entry Level Aws Cloud Practitioner |
|---|---|---|
| Certifications | AWS Certified Identity and Access Management (IAM) fundamentals | AWS Certified Cloud Practitioner |
| Work Environment | Focuses on managing permissions, user access, and security policies within AWS | Broad overview of AWS services, cloud concepts, and basic architecture |
| Employer & Industry Usage | Used by security, DevOps, and cloud teams to control access | Used by a wide range of roles to understand AWS basics and cloud concepts |
Entry Level Aws Iam specializes in managing user permissions and security within AWS, requiring specific IAM knowledge. In contrast, Entry Level Aws Cloud Practitioner provides a broader understanding of AWS services and cloud fundamentals, suitable for roles across various departments. Both certifications are entry-level but serve different focuses within the AWS ecosystem.
More about Entry Level Aws Iam jobs
What cities are hiring for Entry Level Aws Iam jobs?
Cities with the most Entry Level Aws Iam job openings:
What are the most commonly searched types of Aws Iam jobs?
The most popular types of Aws Iam jobs are:
What states have the most Entry Level Aws Iam jobs?
States with the most job openings for Entry Level Aws Iam jobs include:
What job categories do people searching Entry Level Aws Iam jobs look for?
The top searched job categories for Entry Level Aws Iam jobs are:
Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Posted 29 days ago
Job description
About Knox
Knox runs the largest Federal and DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government's most critical missions - from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.
Work at Knox is high-impact and purpose-driven. The problems we solve are high stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.
The Junior SecDevOps Engineer supports the maintenance, monitoring, and security auditing of Knox's cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP. Operating on-site in Washington, DC, within our FedRAMP-authorized boundaries, this role focuses on day-to-day identity administration, configuration monitoring, and vulnerability triage-helping ensure secure, repeatable operations across federal cloud environments under the direct mentorship of senior engineers.
The ideal candidate has strong technical fundamentals (Linux, basic networking, Git, and scripting), a passionate curiosity for cloud security and automation, and a strong security-first mindset. This is a growth-oriented role designed to build elite technical expertise in Zero Trust architectures, automated compliance engineering, and multi-cloud environments.
Role Focus & Technical Matrix:
Zero Trust & Identity: Monitoring Zscaler connectors, HashiCorp & Vault basic secret updates.
Infrastructure as Code: Running pre-written Terraform plans, Git PR workflows, fundamental CloudFormation playbooks.
Security & Compliance: FedRAMP baselines, sorting Wiz/Qualys vulnerability alerts, basic CrowdStrike endpoint checks
Observability & Ops: Grafana dashboard upkeep, CloudWatch metrics, ServiceNow ticketing, shadow on-call protocols
Key Responsibilities:
Zero Trust & Identity Operations
• Assist in monitoring Zero Trust Network Access tools (Zscaler ZPA / PRA), verifying
application connectors and remote access pathways remain operational.
• Support secrets management workflows within HashiCorp Vault, including basic
credential generation, entry updates, and confirming automated rotations execute without
error.
• Review basic IAM permissions and cloud role policies to ensure alignment with least-
privilege models under senior engineering review.
Infrastructure & Automation Support
• Run, test, and troubleshoot pre-defined Terraform modules across development and
staging environments in AWS, Azure, or GCP.
• Identify and log configuration drift or environment resource issues, assisting senior
engineers with standard infrastructure patching and remediation tasks.
• Review cloud security groups, public endpoint configurations, and basic network routes to cross-check them against compliance baselines.
CI/CD & Pipeline Maintenance
• Monitor and triage failing CI/CD pipeline runs within GitHub Actions, GitLab CI, or Azure
DevOps, escalating systemic errors to the team.
• Review automated security scan readouts (SAST, SCA, and container scans) embedded
in the pipeline.
• Assist in updating, building, and running security base-image layers for containers
(Docker) destined for managed Kubernetes clusters (EKS, AKS, GKE).
Compliance Monitoring & Change Administration
• Assist compliance with the programmatic gathering of audit evidence for ongoing
FedRAMP Continuous Monitoring (ConMon) cycles, specifically targeting CM-2, CM-6,
AU-2, and SC-12 controls.
• Assist with Plan of Action and Milestones (POA&M) ticket creation, tracking remediation
deadlines across the platform.
• Draft and submit technical change requests within ServiceNow, ensuring correct structural documentation for review by the Change Advisory Board (CAB).
Observability & Incident Support
• Maintain and adjust basic Grafana and CloudWatch dashboards, ensuring alert
notifications are mapped accurately to operational notification streams.
• Monitor standard system health indicators, performing low-severity alert triaging to
prevent production fatigue.
• Maintain open telemetry operations for ongoing application monitoring
• Participate in a shadow on-call rotation capacity (PagerDuty) alongside senior engineers
to develop live diagnostic and real-time incident resolution skills.
Qualifications
Required Experience & Core Aptitude
• Experience: 1-2 years of experience in an entry-level technical role (e.g., IT Support,
Junior Systems Administrator, Helpdesk/NOC, Cyber Operations, or relevant cloud
engineering internship/bootcamp).
• Location: Must be able to work fully on-site at our Washington, DC office.
• Linux Fundamentals: Comfortable navigating the Linux command line (Bash), managing
file permissions, viewing system logs, and executing basic terminal commands.
• Networking Core: Solid grasp of foundational networking concepts (DNS, TCP/IP,
HTTP/HTTPS, SSH, Subnets, and basic firewall/security group rules).
• Cloud & Version Control Exposure: Foundational exposure to public cloud concepts
(AWS preferred) and basic Git workflows (cloning, branching, commits, Pull Requests).
• Basic Scripting: Ability to read and write fundamental scripts in Python or Bash to
automate repetitive tasks, parse logs, or interact with simple APIs.
• Security Mindset: Strong conceptual understanding of core security principles (Least
Privilege, Multi-Factor Authentication, IAM basics, Encryption).
• Soft Skills & Growth Mindset: High technical curiosity, excellent written documentation
habits, and a strong eagerness to learn directly from senior engineers on-site
Nice to Have (Bonus Experience / Technologies You Will Learn)
Grafana)
800-53, or SOC 2).
Desirable Certifications
Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process.
Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements.
Compensation Range: $90k to $110k plus bonus and equity.
Benefits & Perks
Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PTO, and an employee funded 401k plan. Please note, benefits are subject to change.
We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.
Knox is proud to support veteran hiring - we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.
Knox runs the largest Federal and DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government's most critical missions - from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance.
Work at Knox is high-impact and purpose-driven. The problems we solve are high stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail.
The Junior SecDevOps Engineer supports the maintenance, monitoring, and security auditing of Knox's cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP. Operating on-site in Washington, DC, within our FedRAMP-authorized boundaries, this role focuses on day-to-day identity administration, configuration monitoring, and vulnerability triage-helping ensure secure, repeatable operations across federal cloud environments under the direct mentorship of senior engineers.
The ideal candidate has strong technical fundamentals (Linux, basic networking, Git, and scripting), a passionate curiosity for cloud security and automation, and a strong security-first mindset. This is a growth-oriented role designed to build elite technical expertise in Zero Trust architectures, automated compliance engineering, and multi-cloud environments.
Role Focus & Technical Matrix:
Zero Trust & Identity: Monitoring Zscaler connectors, HashiCorp & Vault basic secret updates.
Infrastructure as Code: Running pre-written Terraform plans, Git PR workflows, fundamental CloudFormation playbooks.
Security & Compliance: FedRAMP baselines, sorting Wiz/Qualys vulnerability alerts, basic CrowdStrike endpoint checks
Observability & Ops: Grafana dashboard upkeep, CloudWatch metrics, ServiceNow ticketing, shadow on-call protocols
Key Responsibilities:
Zero Trust & Identity Operations
• Assist in monitoring Zero Trust Network Access tools (Zscaler ZPA / PRA), verifying
application connectors and remote access pathways remain operational.
• Support secrets management workflows within HashiCorp Vault, including basic
credential generation, entry updates, and confirming automated rotations execute without
error.
• Review basic IAM permissions and cloud role policies to ensure alignment with least-
privilege models under senior engineering review.
Infrastructure & Automation Support
• Run, test, and troubleshoot pre-defined Terraform modules across development and
staging environments in AWS, Azure, or GCP.
• Identify and log configuration drift or environment resource issues, assisting senior
engineers with standard infrastructure patching and remediation tasks.
• Review cloud security groups, public endpoint configurations, and basic network routes to cross-check them against compliance baselines.
CI/CD & Pipeline Maintenance
• Monitor and triage failing CI/CD pipeline runs within GitHub Actions, GitLab CI, or Azure
DevOps, escalating systemic errors to the team.
• Review automated security scan readouts (SAST, SCA, and container scans) embedded
in the pipeline.
• Assist in updating, building, and running security base-image layers for containers
(Docker) destined for managed Kubernetes clusters (EKS, AKS, GKE).
Compliance Monitoring & Change Administration
• Assist compliance with the programmatic gathering of audit evidence for ongoing
FedRAMP Continuous Monitoring (ConMon) cycles, specifically targeting CM-2, CM-6,
AU-2, and SC-12 controls.
• Assist with Plan of Action and Milestones (POA&M) ticket creation, tracking remediation
deadlines across the platform.
• Draft and submit technical change requests within ServiceNow, ensuring correct structural documentation for review by the Change Advisory Board (CAB).
Observability & Incident Support
• Maintain and adjust basic Grafana and CloudWatch dashboards, ensuring alert
notifications are mapped accurately to operational notification streams.
• Monitor standard system health indicators, performing low-severity alert triaging to
prevent production fatigue.
• Maintain open telemetry operations for ongoing application monitoring
• Participate in a shadow on-call rotation capacity (PagerDuty) alongside senior engineers
to develop live diagnostic and real-time incident resolution skills.
Qualifications
Required Experience & Core Aptitude
• Experience: 1-2 years of experience in an entry-level technical role (e.g., IT Support,
Junior Systems Administrator, Helpdesk/NOC, Cyber Operations, or relevant cloud
engineering internship/bootcamp).
• Location: Must be able to work fully on-site at our Washington, DC office.
• Linux Fundamentals: Comfortable navigating the Linux command line (Bash), managing
file permissions, viewing system logs, and executing basic terminal commands.
• Networking Core: Solid grasp of foundational networking concepts (DNS, TCP/IP,
HTTP/HTTPS, SSH, Subnets, and basic firewall/security group rules).
• Cloud & Version Control Exposure: Foundational exposure to public cloud concepts
(AWS preferred) and basic Git workflows (cloning, branching, commits, Pull Requests).
• Basic Scripting: Ability to read and write fundamental scripts in Python or Bash to
automate repetitive tasks, parse logs, or interact with simple APIs.
• Security Mindset: Strong conceptual understanding of core security principles (Least
Privilege, Multi-Factor Authentication, IAM basics, Encryption).
• Soft Skills & Growth Mindset: High technical curiosity, excellent written documentation
habits, and a strong eagerness to learn directly from senior engineers on-site
Nice to Have (Bonus Experience / Technologies You Will Learn)
- Exposure to Infrastructure as Code concepts (Terraform or CloudFormation).
- Familiarity with container basics (Docker) or CI/CD pipelines (GitHub Actions, GitLab CI)
- Basic experience using ticketing or monitoring tools (Jira, ServiceNow, CloudWatch,
Grafana)
- Conceptual awareness of federal security or compliance frameworks (FedRAMP, NIST
800-53, or SOC 2).
Desirable Certifications
- CompTIA Security+ or Linux+
- AWS Certified Cloud Practitioner or Solutions Architect (Associate)
- HashiCorp Certified: Terraform Associate (or actively pursuing)
- Certified: Terraform Associate (or actively pursuing)
- Microsoft Certified: Azure Fundamentals
Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process.
Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements.
Compensation Range: $90k to $110k plus bonus and equity.
Benefits & Perks
Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PTO, and an employee funded 401k plan. Please note, benefits are subject to change.
We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status.
Knox is proud to support veteran hiring - we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring.