Skip to content
Search jobs inside your AI agent. Claude, ChatGPT, Claude Code, Codex, Gemini, Cursor and Grok
Connect

QBA

NewBe an early applicant

DevSecOps Engineer

Posted Updated
Discussion

Summary

Designs, builds, and operates secure AWS-native CI/CD pipelines: Infrastructure as Code (CDK, CloudFormation), shift-left security (SAST/DAST/SCA), FedRAMP/NIST compliance automation, and AI-assisted tooling. Hybrid role based in Reston, VA; US citizenship and clearance eligibility required.

Compensation: $120k – $140k • No equity

𝗗𝗲𝘃𝗦𝗲𝗰𝗢𝗽𝘀 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿

𝗝𝗼𝗯 𝗜𝗗: 17.5

𝗘𝗺𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁 𝗧𝘆𝗽𝗲: Full-Time

𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: Reston, VA and client locations in the Washington, D.C. metropolitan area as required

𝗪𝗼𝗿𝗸 𝗔𝗿𝗿𝗮𝗻𝗴𝗲𝗺𝗲𝗻𝘁: Hybrid, 3 days remote per week

𝗔𝗕𝗢𝗨𝗧 𝗧𝗛𝗘 𝗥𝗢𝗟𝗘

We are seeking an experienced DevSecOps Engineer to design, build, and operate secure and scalable software delivery pipelines for a cloud-based platform.

The ideal candidate will have hands-on experience with AWS-native DevOps tooling, Infrastructure as Code, CI/CD automation, and security integration across the Software Development Lifecycle.

The role focuses on implementing shift-left security practices, automating compliance processes, and leveraging AI-assisted tools to improve development, testing, and deployment workflows.

𝗞𝗘𝗬 𝗥𝗘𝗦𝗣𝗢𝗡𝗦𝗜𝗕𝗜𝗟𝗜𝗧𝗜𝗘𝗦

  1. Design, build, and maintain CI/CD pipelines using AWS CodePipeline and AWS CodeBuild.

  2. Implement Infrastructure as Code using AWS CDK and CloudFormation.

  3. Integrate SAST, DAST, Software Composition Analysis, and policy as code into CI/CD pipelines.

  4. Automate security controls and compliance evidence collection aligned with FedRAMP and NIST frameworks.

  5. Support cloud environment provisioning and deployment automation.

  6. Implement deployment strategies including Blue/Green and Canary deployments.

  7. Integrate AI-assisted tools for security scanning, automated testing, and pipeline development.

  8. Monitor pipeline performance, troubleshoot deployment issues, and continuously improve delivery processes.

  9. Collaborate with engineering, security, and client stakeholders to deliver secure and reliable solutions.

𝗥𝗘𝗤𝗨𝗜𝗥𝗘𝗗 𝗤𝗨𝗔𝗟𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦

  1. Minimum 3 years of professional DevOps or DevSecOps engineering experience.

  2. Hands-on experience with Amazon Web Services.

  3. Practical experience implementing Infrastructure as Code using AWS CDK and CloudFormation.

  4. Strong understanding of CI/CD pipelines and automation.

  5. Experience with security automation and integrating security tools into development pipelines.

  6. Scripting experience using Python, Bash, or similar programming languages.

  7. Ability to work independently, manage shifting priorities, and collaborate effectively with technical teams and stakeholders.

  8. Strong communication and problem-solving skills.

𝗣𝗥𝗘𝗙𝗘𝗥𝗥𝗘𝗗 𝗤𝗨𝗔𝗟𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦

  1. AWS certification in DevOps or Security.

  2. Experience working with FedRAMP and NIST security and compliance requirements.

  3. Familiarity with AI-assisted DevSecOps tools and automation.

  4. Experience implementing automated security testing and compliance workflows.

𝗔𝗗𝗗𝗜𝗧𝗜𝗢𝗡𝗔𝗟 𝗥𝗘𝗤𝗨𝗜𝗥𝗘𝗠𝗘𝗡𝗧𝗦

  1. Must be a United States Citizen.

  2. Must be able to successfully pass a 7-year background check.

  3. Must be eligible to obtain and maintain a United States Government security clearance.

  4. Strong verbal and written communication skills.

  5. Ability to prioritize tasks, take initiative, and adapt to changing project requirements.

𝗘𝗺𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁 𝗧𝘆𝗽𝗲: Full-Time

𝗪𝗼𝗿𝗸 𝗟𝗼𝗰𝗮𝘁𝗶𝗼𝗻: Reston, Virginia, with occasional work at client locations in the Washington, D.C. metropolitan area as required.

𝗥𝗲𝗺𝗼𝘁𝗲 𝗣𝗼𝗹𝗶𝗰𝘆: 3 days remote per week.

𝗘𝗗𝗨𝗖𝗔𝗧𝗜𝗢𝗡 𝗔𝗡𝗗 𝗖𝗘𝗥𝗧𝗜𝗙𝗜𝗖𝗔𝗧𝗜𝗢𝗡𝗦

No specific degree requirement has been provided.

AWS DevOps or Security certification is preferred.

Skills

Apply

See also

Security jobs by country — openings, pay and top skills →