Senior DevSecOps Engineer

Salary: $100,000 - 180,000 per year Requirements:

• We require a bachelors degree in Computer Science, Software Engineering, Computer Engineering, Information Systems, Cybersecurity, or a closely related technical discipline.
• We expect at least 8 years of experience in software engineering, DevOps, DevSecOps, cloud engineering, cybersecurity engineering, or a similar field.
• We need demonstrated experience applying DevSecOps practices in enterprise settings that support complex application modernization efforts.
• We require hands-on experience building and maintaining CI/CD pipelines and deployment automation frameworks.
• We need experience embedding automated testing and security controls into software delivery workflows.
• We require experience supporting hybrid cloud and on-premises environments.
• We expect a solid understanding of Agile software development methods.
• We need extensive familiarity with DevSecOps platforms, automation toolchains, and software delivery ecosystems.
• We require strong knowledge of Microsoft Azure.
• We need experience with GitHub Enterprise Server/Cloud, JFrog Artifactory, JFrog Xray, SonarQube, GitHub Advanced Security, GitHub Copilot, and Subject7.
• We require knowledge of containerization and infrastructure technologies such as Azure Kubernetes Service (AKS), virtual machines, Application Gateway, App Services, Key Vault, ServiceNow, CyberArk, and Terraform.
• We need proficiency in one or more modern programming or scripting languages such as Java, C#, or Python.
• We require experience with source code repositories, version control systems, and artifact management platforms.
• We expect a strong grasp of Zero Trust Architecture, application security, NIST 800-53 controls, continuous monitoring, and logging/audit requirements.
• We need knowledge of enterprise testing frameworks and automated quality assurance practices.
• We require strong written and verbal communication skills, including experience briefing senior leaders.
• We need experience supporting Continuous Authority to Operate (ATO) efforts.
• We require the ability to obtain and maintain a Public Trust, suitability determination, or other required clearance.
• Preferred certifications include CKA, CKS, Microsoft Azure DevOps Engineer Expert, Microsoft Azure Solutions Architect Expert, or DevSecOps Foundation-equivalent credentials.

• We design, develop, implement, and maintain enterprise DevSecOps solutions that unify development, security, testing, and operations.
• We build and optimize CI/CD pipelines for automated builds, testing, security scanning, deployment, and release management.
• We support development teams by embedding security, compliance, and quality controls throughout the software development lifecycle.
• We develop and maintain Infrastructure as Code solutions to automate cloud and on-premises provisioning, configuration, and management.
• We implement automated deployment and configuration management processes that improve consistency, reliability, and scalability.
• We participate in the design, configuration, testing, administration, and monitoring of enterprise DevSecOps toolchains.
• We research and recommend emerging DevSecOps tools, technologies, frameworks, and best practices.
• We integrate and maintain application security capabilities such as SAST, DAST, SCA, container and image scanning, secret detection, infrastructure scanning, and fuzz testing.
• We help implement Zero Trust principles across development and operational environments.
• We ensure alignment with federal cybersecurity requirements and security engineering best practices.
• We support vulnerability identification, remediation planning, risk mitigation, and security reporting.
• We assist with audit readiness and compliance documentation.
• We develop and lead enterprise test automation strategies within DevSecOps pipelines.
• We implement automated functional, integration, regression, performance, load, and security testing.
• We enable self-service testing for product and development teams.
• We establish and maintain testing frameworks, automation standards, and quality assurance processes.
• We define test coverage metrics, quality gates, pass/fail criteria, and release readiness requirements.
• We promote shift-left testing by bringing validation activities earlier into the SDLC.
• We continuously improve test plans, test data management, and automated testing frameworks.
• We ensure traceability across requirements, work items, source code, test cases, vulnerabilities, mitigation actions, and releases.
• We analyze and report test results, quality trends, vulnerabilities, and performance metrics to stakeholders and leadership.
• We provide technical leadership and mentorship to engineers, DevSecOps practitioners, testers, and operations personnel.
• We act as a subject matter expert on DevSecOps methods, toolchains, automation frameworks, and software engineering best practices.
• We support architecture reviews, design discussions, technical assessments, and modernization efforts.
• We collaborate with solution architects, security architects, product owners, and technical teams to align with organizational goals.

• Architect
• Azure
• Big Data
• C#
• CI/CD
• Cloud
• Copilot
• DevSecOps
• DevOps
• GitHub
• Support
• JFrog
• Java
• Kubernetes
• Python
• Security
• ServiceNow
• Terraform

More:

We are T-Rex Solutions, LLC, a mid-tier federal services company established in 1999, delivering data-centric mission support to government customers. We design, integrate, secure, and deploy advanced technical solutions across cloud and infrastructure services, cybersecurity, and big data engineering. This role supports our FDIC customer and is primarily remote, with occasional meetings at FDIC headquarters in Arlington, Virginia as needed. We offer a collaborative environment, opportunities for professional growth, competitive compensation, performance bonuses, training and educational reimbursement, and benefits including PTO available immediately upon joining, paid parental leave, medical, vision, and dental coverage, a 401(k) with company match vesting after 60 days, and annual training and tuition support.

last updated 33 week of 2026