DevSecOps Engineer
Summary
Designs, builds, and operates secure AWS-native CI/CD pipelines: Infrastructure as Code (CDK, CloudFormation), shift-left security (SAST/DAST/SCA), FedRAMP/NIST compliance automation, and AI-assisted tooling. Hybrid role based in Reston, VA; US citizenship and clearance eligibility required.
Compensation: $120k – $140k • No equity
𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿
𝗝𝗼𝗯 𝗜𝗗: 17.5
𝗘𝗺𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁 𝗧𝘆𝗽𝗲: Full-Time
𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: Reston, VA and client locations in the Washington, D.C. metropolitan area as required
𝗪𝗼𝗿𝗸 𝗔𝗿𝗿𝗮𝗻𝗴𝗲𝗺𝗲𝗻𝘁: Hybrid, 3 days remote per week
𝗔𝗕𝗢𝗨𝗧 𝗧𝗛𝗘 𝗥𝗢𝗟𝗘
We are seeking an experienced DevSecOps Engineer to design, build, and operate secure and scalable software delivery pipelines for a cloud-based platform.
The ideal candidate will have hands-on experience with AWS-native DevOps tooling, Infrastructure as Code, CI/CD automation, and security integration across the Software Development Lifecycle.
The role focuses on implementing shift-left security practices, automating compliance processes, and leveraging AI-assisted tools to improve development, testing, and deployment workflows.
𝗞𝗘𝗬 𝗥𝗘𝗦𝗣𝗢𝗡𝗦𝗜𝗕𝗜𝗟𝗜𝗧𝗜𝗘𝗦
-
Design, build, and maintain CI/CD pipelines using AWS CodePipeline and AWS CodeBuild.
-
Implement Infrastructure as Code using AWS CDK and CloudFormation.
-
Integrate SAST, DAST, Software Composition Analysis, and policy as code into CI/CD pipelines.
-
Automate security controls and compliance evidence collection aligned with FedRAMP and NIST frameworks.
-
Support cloud environment provisioning and deployment automation.
-
Implement deployment strategies including Blue/Green and Canary deployments.
-
Integrate AI-assisted tools for security scanning, automated testing, and pipeline development.
-
Monitor pipeline performance, troubleshoot deployment issues, and continuously improve delivery processes.
-
Collaborate with engineering, security, and client stakeholders to deliver secure and reliable solutions.
𝗥𝗘𝗤𝗨𝗜𝗥𝗘𝗗 𝗤𝗨𝗔𝗟𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦
-
Minimum 3 years of professional DevOps or DevSecOps engineering experience.
-
Hands-on experience with Amazon Web Services.
-
Practical experience implementing Infrastructure as Code using AWS CDK and CloudFormation.
-
Strong understanding of CI/CD pipelines and automation.
-
Experience with security automation and integrating security tools into development pipelines.
-
Scripting experience using Python, Bash, or similar programming languages.
-
Ability to work independently, manage shifting priorities, and collaborate effectively with technical teams and stakeholders.
-
Strong communication and problem-solving skills.
𝗣𝗥𝗘𝗙𝗘𝗥𝗥𝗘𝗗 𝗤𝗨𝗔𝗟𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦
-
AWS certification in DevOps or Security.
-
Experience working with FedRAMP and NIST security and compliance requirements.
-
Familiarity with AI-assisted DevSecOps tools and automation.
-
Experience implementing automated security testing and compliance workflows.
𝗔𝗗𝗗𝗜𝗧𝗜𝗢𝗡𝗔𝗟 𝗥𝗘𝗤𝗨𝗜𝗥𝗘𝗠𝗘𝗡𝗧𝗦
-
Must be a United States Citizen.
-
Must be able to successfully pass a 7-year background check.
-
Must be eligible to obtain and maintain a United States Government security clearance.
-
Strong verbal and written communication skills.
-
Ability to prioritize tasks, take initiative, and adapt to changing project requirements.
𝗘𝗺𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁 𝗧𝘆𝗽𝗲: Full-Time
𝗪𝗼𝗿𝗸 𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: Reston, Virginia, with occasional work at client locations in the Washington, D.C. metropolitan area as required.
𝗥𝗲𝗺𝗼𝘁𝗲 𝗣𝗼𝗹𝗶𝗰𝘆: 3 days remote per week.
𝗘𝗗𝗨𝗖𝗔𝗧𝗜𝗢𝗡 𝗔𝗡𝗗 𝗖𝗘𝗥𝗧𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦
No specific degree requirement has been provided.
AWS DevOps or Security certification is preferred.