Senior DevSecOps Engineer / Top SECRET / ONSITE

Visual Soft, Inc is seeking qualified candidates (US Citizens with active TOP SECRET clearance - a requirement on its Project with a Major Prime) for the following position for a federal agency.

Job Title: Senior DevSecOps Engineer
Location: Huntsville, AL (ONSITE)
Salary: based on experience on other qualifications. OR 1099 is also available only for individuals NOT C2C scenario, check will be issued in legal name
Clearance: TOP SECRET is a must and job is fully ONSITE
Education: Bachelor's degree with 8+ years of experience
Senior DevSecOps Engineer

Role Overview
We are seeking an experienced **Senior DevSecOps Engineer** to design, automate, and secure our enterprise CI/CD workflows and cloud architecture. In this role, you will embed **DevSecOps** practices directly into delivery pipelines, lead our **cloud security** posture across modern application environments, and establish robust **identity and access management** controls across multi-account **AWS** infrastructures.

---
Primary Responsibilities

*Own the implementation and operation of software delivery pipelines**, from build through production release, ensuring strict adherence to **DevSecOps** and secure delivery standards.
*Develop, administer, and maintain automated build, test, deployment, and release workflows** using GitLab CI/CD, GitLab Runners, **AWS CodePipeline**, **AWS CodeBuild**, and related **AWS** automation technologies.
*Administer GitLab platform infrastructure** (projects, groups, runners, repositories, and permissions), enforce role-based access control and **identity and access management** principles, and develop reusable CI/CD templates and pipeline libraries adopted across Agile teams.
*Integrate automated security capabilities into software delivery pipelines**, including static application security testing (SAST), dynamic testing (DAST), software composition analysis (SCA), container image scanning, secrets detection, Infrastructure-as-Code (IaC) scanning, and software supply chain security.
*Design and maintain automated deployment strategies for Kubernetes-based applications** utilizing Helm, GitOps methodologies, and progressive deployment techniques integrated with **AWS** services (such as Amazon EKS).
*Configure and administer GitLab Container Registry, package repositories, artifact repositories**, and software dependency management solutions supporting secure software delivery and vulnerability remediation.
*Collaborate with Cloud Systems Owners** to ensure **AWS** cloud platforms effectively support automated software deployment, scalability, operational monitoring, application reliability, and end-to-end **cloud security**.
*Architect and enforce identity and access management (IAM)** policies, least-privilege boundaries, IAM Roles for Service Accounts (IRSA), and federated authentication across all CI/CD pipelines and **AWS** cloud environments.
*Partner with software development teams** to improve build reliability, deployment consistency, release quality, and developer productivity through automation, self-service engineering capabilities, and shift-left security practices.
*Work closely with cybersecurity teams** to operationalize **cloud security** benchmarks (CIS, NIST), integrate security gates throughout the SDLC, and ensure continuous compliance with organizational security requirements.
*Troubleshoot build failures, deployment issues, pipeline performance, dependency management, and software delivery problems** across development, integration, and production environments.
*Develop and maintain pipeline documentation, deployment procedures, release management processes**, operational runbooks, and **DevSecOps** engineering standards.
*Participate in Agile ceremonies** while supporting multiple software development teams through automation, continuous integration, continuous delivery, and proactive threat mitigation.

---

### Key Qualifications & Core Competencies
* AWS:** Deep hands-on experience designing and operating secure infrastructure on Amazon Web Services (EKS, IAM, KMS, Security Hub, GuardDuty, CloudTrail, S3, VPC).
* DevSecOps:** Proven track record of integrating automated security tooling (SAST/DAST, SCA, Trivy, Snyk, Semgrep, Checkov/tfsec) into active CI/CD pipelines without slowing developer velocity.
* Cloud Security:** Practical expertise implementing defense-in-depth, container runtime security, network perimeter defense, and cloud compliance auditing.
* Identity and Access Management:** Advanced knowledge of IAM policies, cross-account access, credential brokering, OIDC token federation for CI/CD runners, and zero-trust access controls.

Standard benefits: Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees or w-2 employees with no benefits will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all w-2 employees are eligible to be part of company's profit sharing, no employee contributions required.