DevSecOps Engineer

DevSecOps Engineer (Kubernetes, CI/CD)

Washington, District of Columbia

Hybrid 3 days in Office, 2 Days Remote

The initial engagement requires United States citizenship

This is a 3 days hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.

Job Description:

• Create secure, cloud-native infrastructure in Amazon Web Services (AWS), develop the continuous integration and continuous delivery (CI/CD) pipelines used to deploy to that infrastructure, and maintain both.
• Capture that infrastructure in code, using Terraform or CloudFormation.
• Build security into the delivery path with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), vulnerability scanning, and secrets management.
• Support the workloads that run on Docker and Kubernetes, and run down faults in infrastructure, networking, deployments, and security.
• Script the repeatable operational work, and automate provisioning and releases so that health checks and rollback are built in and every run produces its compliance evidence.
• Put National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls in place, and keep authorization and continuous monitoring evidence up to date.
• Use Python, and Bash when appropriate, to automate the work; speed it up with AI-assisted tools; and improve the quality of everything that ships.

Requirements

• 4+ years of experience in DevSecOps or platform engineering
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Practical experience creating security-gated CI/CD pipelines in AWS-native tools (CodeBuild, CodePipeline) or in comparable tools (GitLab CI, GitHub Actions)
• A background in standing up Kubernetes clusters and running them
• Practical work containerizing applications and creating Docker images, plus infrastructure as code in CloudFormation or Terraform
• Vulnerability scanning, along with automated security testing like SAST, DAST, and SCA
• Ability to program and script in Python (Bash skills a plus)
• Proficiency working in Linux operating systems and writing shell scripts
• Strong knowledge of networking, including routing and load balancing, along with application programming interfaces and the way web applications are architected
• Using Git to track and manage versions
• A background in both logging and monitoring
• Experience generating code, reviewing it, and validating it with AI-assisted development tools, for example GitHub Copilot
• Proficiency in writing, PowerPoint, and Excel

Preferred

• Prior work in information technology for the federal government
• A background in secrets management using tools such as AWS Secrets Manager, HashiCorp Vault, or a similar product
• A federal security background covering NIST SP 800-53 control implementation, Authority to Operate (ATO) support, and support for Federal Information Security Modernization Act (FISMA) compliance
• Certification from AWS

Benefits

Benefits include medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) with an employer match of up to 4% of salary; unlimited paid time off; and sponsored professional certifications and continuing education.