Senior DevSecOps Engineer

Join a team where innovation meets mission, our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver at scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. We have an immediate need for a highly skilled Senior-level DevSecOps Engineer to support federal programs hosted on AWS GovCloud. This role requires expertise in DevSecOps best practices, cloud automation, security compliance, and continuous integration/continuous deployment (CI/CD) to enhance the security, scalability, and efficiency of mission-critical applications. Core Responsibilities Technical Leadership & Team Management: Lead, mentor, and manage a team of approximately five DevSecOps engineers, providing technical direction, prioritizing work, conducting code and architecture reviews, and fostering a collaborative, high-performing "one team" culture while remaining an active hands-on contributor. Hands-On Engineering: Serve as the technical lead for complex infrastructure, automation, and deployment efforts by designing solutions, troubleshooting production issues, developing infrastructure and pipeline code, and supporting implementation across the DevSecOps toolchain. Operational Support & On-Call: Provide operational leadership during production incidents, outages, and high-priority events. Participate in an on-call rotation as required, ensuring timely incident response, root cause analysis, and restoration of services while driving continuous improvements to system reliability and operational maturity. AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments for DoD and Civilian agency applications. DevSecOps Pipeline Development: Build and optimize CI/CD pipelines using tools like GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security compliance. Security & Compliance: Ensure adherence to Federal cybersecurity frameworks (e.g., NIST 800-171, NIST 800-53, RMF, FedRAMP, Zero Trust). Implement STIGs, security baselines, and automated security scanning (SAST/DAST). Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible. Containerization & Orchestration: Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, leveraging services like Amazon EKS, ECS, and Fargate. Monitoring & Incident Response: Implement AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK for proactive monitoring, logging, and compliance reporting. Automation & Scripting: Develop automation scripts using Python, Bash, or PowerShell to improve deployment efficiency and security enforcement. Collaboration & Knowledge Sharing: Work closely with software developers, cybersecurity teams, and cloud engineers to integrate security and automation into the software development lifecycle (SDLC). Requirements US citizenship with the ability to obtain a successful DoD Secret security clearance required Security+, AWS Certified Security 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles. Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks. Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar). Hands-on experience with Infrastructure as Code (IaC) using Terraform, CloudFormation, and Ansible. Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate). Strong understanding of AWS security services (AWS IAM, GuardDuty, Security Hub,AWS KMS, AWS WAF, AWS Config, AWS Secrets Manager). Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs, ZeroTrust). Experience implementing automated security testing (SAST, DAST, vulnerability scanning, SBOM management). Proficiency in scripting (Python, Bash, PowerShell) for automation and security enforcement. Salary Range: $150,000 - $180,000 annually. Actual compensation will be determined based on the selected candidate's experience, education, certifications, skills, and overall qualifications. Please join us, as together we build a better world one mission at a time powered by Technology and its People!