DevSecOps Engineer
Posted Updated
Summary
DevSecOps engineer supporting a mission-critical federal cloud portal and data ecosystem in AWS: builds and maintains CI/CD pipelines and Infrastructure-as-Code (Terraform/CloudFormation), develops AWS Glue ETL pipelines, and embeds security and compliance (NIST 800-53, FedRAMP, Zero Trust) across the SDLC. Onsite in Washington, DC.
We are seeking a highly skilled DevSecOps Engineer to support the operation, modernization, security, and continuous enhancement of a mission-critical federal cloud-based information portal and supporting data ecosystem. The successful candidate will serve as a technical leader responsible for secure cloud infrastructure, CI/CD automation, application deployment, security engineering, and cloud migration initiatives within an AWS environment.
This role requires strong expertise in AWS cloud architecture, AWS Glue, cloud security, Infrastructure-as-Code (IaC), and automated deployment practices. The DevSecOps Engineer will work closely with cloud architects, application developers, data engineers, cybersecurity personnel, and government stakeholders to ensure secure, scalable, and reliable system operations. The environment includes complex integrations, reporting platforms, data pipelines, and cloud modernization efforts within a regulated federal environment.
Key Responsibilities
DevSecOps and Automation
- Design, implement, and maintain CI/CD pipelines supporting application, infrastructure, and data deployments.
- Develop Infrastructure-as-Code solutions using tools such as Terraform, CloudFormation, or similar technologies.
- Automate environment provisioning, configuration management, application deployment, and operational monitoring.
- Establish and maintain automated testing, release validation, and rollback procedures.
- Support software release management, version control, and deployment governance processes.
- Drive continuous improvement initiatives that increase deployment efficiency, reliability, and security.
Cloud Architecture and Engineering
- Design and support secure, scalable, and highly available AWS cloud solutions.
- Collaborate with technical teams to implement cloud modernization and migration initiatives.
- Configure, manage, and optimize AWS services such as:
- AWS Glue
- AWS Lambda
- Amazon S3
- Amazon RDS
- AWS IAM
- AWS CloudWatch
- AWS Secrets Manager
- AWS EventBridge
- AWS CloudTrail
- AWS Config
- AWS Security Hub
- Support disaster recovery, backup, resilience, and availability strategies.
- Monitor and optimize cloud resource utilization, performance, and operational health.
Security Engineering
- Integrate security controls throughout the software development lifecycle (SDLC).
- Implement automated security scanning, vulnerability detection, compliance monitoring, and remediation workflows.
- Develop and maintain solutions for access management, configuration compliance, and system hardening.
- Conduct security reviews of cloud architectures, applications, APIs, and integrations.
- Support incident response, root cause analysis, corrective action planning, and security reporting.
- Ensure systems comply with federal cybersecurity standards and organizational security requirements.
Data Integration and AWS Glue
- Design, develop, and support AWS Glue ETL pipelines.
- Automate data ingestion, transformation, validation, and reconciliation processes.
- Support integration of multiple enterprise applications, databases, and reporting platforms.
- Implement monitoring, alerting, and operational controls for data processing workflows.
- Ensure data quality, traceability, auditability, and operational transparency across cloud-based data environments.
Operations and Support
- Troubleshoot application, infrastructure, integration, and cloud platform issues.
- Support production deployments and operational maintenance activities.
- Participate in change management and release planning processes.
- Develop technical documentation, standard operating procedures, and system diagrams.
- Collaborate with cross-functional teams to resolve issues and implement enhancements.
Qualifications
Education
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical discipline.
Experience
- Minimum 5 years of experience in DevOps, DevSecOps, Cloud Engineering, or Cloud Security roles.
- Minimum 3 years of hands-on experience supporting AWS cloud environments.
- Experience implementing and maintaining CI/CD pipelines.
- Experience deploying and managing Infrastructure-as-Code solutions.
- Experience securing cloud-hosted applications and services.
- Experience supporting production systems in highly regulated environments.
- Experience integrating security practices into software development and deployment processes.
- Experience supporting Federal Government cloud environments.
- Experience working within AWS GovCloud or similarly regulated cloud environments.
- Experience supporting enterprise portals, data platforms, reporting systems, or mission-critical applications.
- Knowledge of NIST 800-53, FISMA, FedRAMP, Zero Trust Architecture, and federal cybersecurity requirements.
- Experience with AWS GuardDuty, Security Hub, Inspector, Config, and CloudTrail.
- Experience supporting data analytics, business intelligence, or reporting environments.
- Experience working in Agile development environments.
Technical Skills
- AWS Cloud Architecture
- AWS Glue
- CI/CD Pipeline Development
- Terraform and/or AWS CloudFormation
- Git and Source Control Management
- Jenkins, GitHub Actions, Azure DevOps, or similar tools
- Python, PowerShell, Bash, or comparable scripting languages
- Linux System Administration
- Docker, ECS, EKS, or Kubernetes
- Identity and Access Management (IAM)
- Security Monitoring and Vulnerability Management
- Logging, Monitoring, and Observability Solutions
Preferred Certifications
- AWS Certified Solutions Architect – Associate or Professional
- AWS Certified Security – Specialty
- AWS Certified DevOps Engineer – Professional
- Certified Cloud Security Professional (CCSP)
- Certified Information Systems Security Professional (CISSP)
- CompTIA Security+
- Certified Kubernetes Administrator (CKA)
PCI Federal (PCIF) and its subsidiaries are an equal-opportunity employer. PCIF does not discriminate on the basis of age, sex, race, national origin, religion, marital status, sexual orientation or identity, Veterans or Disability status.
Preference may be extended to qualified Native American Indian candidates in accordance with applicable federal law.
Skills
- Agile
- Analytics
- API
- Automation
- AWS
- Aws Glue
- Azure
- Azure DevOps
- Bash
- Business Intelligence
- CI/CD
- Cissp
- Cloud
- Cloud Security
- CloudFormation
- CloudTrail
- CloudWatch
- Corrective Action
- Cybersecurity
- Data Analytics
- Data Ingestion
- Data Pipelines
- Data Quality
- DevOps
- DevSecOps
- Docker
- ECS
- EKS
- ETL
- Eventbridge
- Fedramp
- Git
- GitHub
- GitHub Actions
- IAM
- Infrastructure as Code
- Jenkins
- Kubernetes
- Lambda
- Linux
- Nist
- Observability
- PowerShell
- Python
- RDS
- Root Cause Analysis
- S3
- SDLC
- Terraform
- Test Automation
- Version Control
- Vulnerability Management
- Zero Trust