DevSecOps Engineer

We are building a team for one of the U.S. Federal Government's largest technology modernization programs, underpinning the U.S. capital markets.

Built on AWS and leveraging an AI-powered software engineering platform, this program offers a unique opportunity to gain hands-on experience with next-generation AI, Agentic AI, cloud technologies, and AI-driven engineering.

If you are looking for technically challenging work, exceptional learning, and a résumé-defining opportunity with national impact, I would love to connect.

Job Title: DevSecOps Engineer

Position Type: Full-Time

Location: Hybrid (2 days onsite)

Days Remote: 3 days remote

Position Summary:

The DevSecOps Engineer designs, builds, and operates secure software delivery pipelines for a large-scale federal cloud platform built on AWS. This role is responsible for implementing CI/CD pipelines, infrastructure-as-code, security automation, and deployment automation while embedding DevSecOps and shift-left security practices throughout the software development lifecycle. Working closely with developers, architects, and security teams, the DevSecOps Engineer helps deliver secure, compliant, and highly automated software releases that meet federal security and compliance requirements.

Key Responsibilities:

• Design, build, and maintain secure CI/CD pipelines using AWS-native services, including AWS CodePipeline and AWS CodeBuild.
• Implement and maintain infrastructure-as-code using AWS CDK and AWS CloudFormation.
• Integrate security scanning capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and policy-as-code into CI/CD pipelines.
• Automate compliance evidence collection to support FedRAMP and NIST security controls.
• Support automated environment provisioning and deployment strategies, including blue/green and canary deployments.
• Integrate AI-assisted development and DevSecOps tools for code scanning, testing, and pipeline automation.
• Monitor CI/CD pipeline health, reliability, and performance while driving continuous improvements in delivery metrics.
• Collaborate with development and security teams to implement secure software delivery best practices across the software development lifecycle.

Minimum Experience:

• 3+ years of DevOps or DevSecOps engineering experience.
• Hands-on experience with AWS cloud services and infrastructure-as-code.
• Experience implementing CI/CD pipelines and security automation.
• Experience developing automation scripts using Python, Bash, or similar scripting languages.

Mandatory Skills:

• DevSecOps.
• DevOps.
• AWS.
• AWS CodePipeline.
• AWS CodeBuild.
• AWS CDK.
• AWS CloudFormation.
• Infrastructure as Code (IaC).
• CI/CD.
• Security automation.
• Static Application Security Testing (SAST).
• Dynamic Application Security Testing (DAST).
• Software Composition Analysis (SCA).
• Policy as Code.
• FedRAMP compliance.
• NIST security controls.
• Blue/green deployments.
• Canary deployments.
• Python, Bash, or similar scripting languages.
• AI-assisted DevSecOps tools.
• Pipeline monitoring and optimization.
• U.S. work authorization.
• Ability to obtain a Public Trust clearance.

Nice-to-Have Skills:

• AWS DevOps Engineer or AWS Security certification.
• FedRAMP implementation experience.
• NIST compliance experience.
• Experience using AI-assisted DevSecOps and software engineering tools.

Degrees and Certifications

Preferred

• AWS DevOps Engineer certification.
• AWS Security certification.