DevSecOps Engineer

Job Description

Job Description

This job is posted on behalf of Flex Staffing Resources by Top Echelon.

The Opportunity

We are exclusively recruiting for a rapidly growing AI and data innovation hub that helps the US government solve hard problems and deliver better outcomes. This organization is built differently: it is a certified Benefit Corporation and SBA 8(a) company focused specifically on AI and data for government. They believe that business success should create client value, social value, and real opportunity for their team. Clients describe this team’s support as “absolutely excellent,” and their work has earned top CPARS ratings, major agency awards, and recognition at global data competitions.

They put people first and always expect ownership. Trust and motivation come before competence. They are looking for someone who takes ownership, learns quickly, helps their teammates, and refuses to walk past a problem because it "belongs to someone else." You are not joining just to fill a seat—you are joining to take ownership of a mission and help build a company.

Your First Project

In this role, your initial focus will be owning assigned delivery pipelines, automation, and the environments that carry federal systems into production. Depending on the specific assignment, you will:

• Build continuous integration and continuous delivery (CI/CD) pipelines with strict security gates and controlled promotion.

• Define the infrastructure beneath those pipelines as code, ensuring reproducible environments and least-privilege access.

• Automate security testing, vulnerability scanning, and secrets management across the entire delivery path.

• Build the monitoring and evidence required to support Risk Management Framework (RMF) authorization and continuous monitoring.

You will deliver pipelines that enforce required controls and produce the necessary evidence for release reviews. You will automate manual steps out of the release path and build progressive delivery with automated health checks and rollbacks so that deploying code is no longer a stressful event.

(Note: This is just where you start. As the work evolves, you will learn new systems, take on greater responsibility, and be moved to where the hardest problems are.)

Who You Are

You build security and reliability into your work from the start because they cannot be afterthoughts in a federal environment. You automate what others do by hand and always leave a clear audit trail. You experiment, fail, learn, and repeat quickly. Above all, you would rather own an outcome than be handed a task.

What You Bring to the Table (Requirements)

• Clearance: United States citizenship and the ability to obtain a Public Trust determination are required.

• Location: This is a hybrid W-2 position based in the Washington, DC metropolitan area. The initial engagement is expected to be on-site in DC 1-2 days a week.

• Experience: 4+ years of dedicated DevSecOps or platform engineering experience.

• Education: Bachelor's degree in computer science, IT, cybersecurity, engineering, or a related technical discipline.

• Technical Stack & Skills:

• Hands-on CI/CD pipeline automation with security gates using AWS-native tools (CodePipeline, CodeBuild) or comparable tools (GitHub Actions, GitLab CI).

• Infrastructure as code (CloudFormation or Terraform).

• Hands-on Docker image creation and containerization.

• Experience deploying and managing Kubernetes clusters.

• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.

• Scripting beyond basic configuration using Python or Bash.

• Proficiency with Linux OS and shell scripting.

• Strong understanding of networks, routing, load balancing, APIs, and web app architectures.

• Experience using AI-assisted development tools (e.g., GitHub Copilot) for code generation, review, and validation.

• Git-based version control, monitoring, and logging.

• Basic proficiency in writing, PowerPoint, and Excel.

Bonus Points (Preferred)

• Federal security experience (FISMA compliance, NIST SP 800-53 controls, ATO support).

• Active AWS certifications.

• Secrets management experience (HashiCorp Vault, AWS Secrets Manager, etc.).

• Prior Federal IT experience.

Compensation & Benefits

• Base Salary: $120,000 to $140,000 per year.

• Health Benefits: Medical, dental, and vision with 100% of the employee premium paid and 50% of dependent premiums covered.

• Additional Perks: Employer-paid life, accidental death, and short/long-term disability insurance; 401(k) with 100% match up to 4% (immediate vesting); unlimited paid time off; and sponsored certifications/continuing education (like DCAM and AWS).

How to Apply

If you are someone who wants to help build the firm, not just work at it, submit your resume to our team.

When we talk, be prepared to discuss a difficult problem you worked through, the decisions you made, what happened, and what you learned.