Senior DevSecOps Engineer

Senior DevSecOps Engineer

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our passion. People are our purpose. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind. We believe happy employees do amazing work, so join our team NOW! We are currently seeking a Senior DevSecOps Engineer for a Full-Time position.

Job Summary:

Integrates security into CI/CD pipelines, cloud environments, and development workflows so teams can deliver software quickly and safely. Owns pipeline architecture, automated security gating, and infrastructure-as-code standards.

Key Responsibilities

· Design, build, and maintain CI/CD pipelines with embedded security gates.

· Implement SAST, DAST, SCA, container image scanning, and infrastructure-as-code scanning across the toolchain.

· Manage secrets, credentials, certificates, and privileged access within automated workflows.

· Author and maintain infrastructure-as-code for repeatable, auditable environment provisioning.

· Instrument monitoring, logging, and alerting to support operational and security visibility.

· Support ATO, continuous monitoring, and security control evidence generation.

· Coach development teams on secure delivery practices and shift-left adoption.

Minimum Qualifications

· Bachelor's degree in Information Technology, Computer Science, or Cybersecurity.

· Five (5) to eight (8) years of DevSecOps or DevOps engineering experience.

· One current certification among: AWS Certified Security - Specialty, Microsoft Certified Azure Security Engineer Associate, Certified Kubernetes Administrator (CKA), or CompTIA Security+.

· Certified Kubernetes Security Specialist (CKS) or HashiCorp Certified: Terraform Associate, within 180 days of assignment.

· CI/CD security; SAST and DAST; container security; secrets management; infrastructure-as-code scanning; pipeline automation; cloud security configuration.

Technical Environment

Jenkins, GitHub Actions, GitLab CI, and Azure DevOps Pipelines; Terraform and Ansible; Docker, Kubernetes, and Helm; SonarQube, Fortify, and Checkmarx for SAST; OWASP ZAP and Burp Suite for DAST; Snyk, Trivy, and Anchore for software composition and image scanning; HashiCorp Vault and AWS Secrets Manager; Splunk and the ELK Stack; Prometheus and Grafana; AWS and Azure; NIST SP 800-53 control mapping and continuous monitoring evidence.

Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now!!

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!