DevSecOps Engineer

Role: DevSecOps Engineer

We're looking for a candidate who is a U.S. citizen and resides in the contiguous United States. You'll be a W-2 employee, and we do not accept third-party applications. 

Key Responsibilities

• Bachelor's degree in Computer Science or related field (or equivalent experience).
• 7+ years of hands-on experience with DevSecOps in AI/ML or data-intensive systems.
• Familiarity with OpenShift or Kubernetes security hardening.
• Knowledge of Zero Trust Architecture (ZTA) concepts.
• Proven experience managing and driving successful ATO processes.
• Expertise with DevSecOps tools, practices, and frameworks.
• Strong understanding of federal security compliance standards (e.g., NIST 800-53, RMF, FedRAMP)
• Hands-on experience with cloud environments (AWS, Azure, or GCP) and containerization (Docker, Kubernetes).
• Strong scripting and automation skills (Python, Bash, or similar).
• Excellent leadership, communication, and documentation abilities.
• Active security clearance or eligibility to obtain one

• Design, implement, and maintain secure CI/CD pipelines.

• Integrate security tools into DevOps workflows and automate security testing.

• Perform vulnerability scanning, SAST, DAST, SCA, and container image scanning.

• Implement Infrastructure as Code (IaC) security using Terraform, Checkov, or similar tools.

• Hands-on experience with CI/CD pipeline development and automation.
• Experience with container technologies including Docker, Podman, or CRI-O.
• Experience with Kubernetes, OpenShift, or similar orchestration platforms.
• Experience working within AWS cloud environments.
• Proficiency in at least two programming or scripting languages such as Python, Java, Node.js, Go, .NET/C#, Bash, or PowerShell.

• Secure cloud environments across AWS, Azure, or GCP.

• Implement container and Kubernetes security best practices.

• Manage secrets, certificates, encryption, and access controls.

• Implement IAM, RBAC, least-privilege access, and policy-as-code.

• Monitor security events, investigate vulnerabilities, and support remediation.

• Collaborate with development, operations, and security teams to enforce compliance.

• Support security standards and compliance requirements such as ISO 27001, SOC 2, and PCI DSS.