DevSecOps Engineer

Job summary

The DevSecOps Engineer designs and maintains secure, reliable CI/CD pipelines that move applications from source control to production across AWS container, serverless, and virtual machine workloads. The role embeds automated testing and security controls throughout delivery, integrates pipelines with configuration, asset management, reporting, and monitoring systems, and supports compliance through policy automation, metrics, and collaboration with technical and governance stakeholders.

Benefits

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
• Experience operating high-volume, large-scale applications with cloud-native security in AWS.
• Hands-on experience in DevOps, DevSecOps, or security engineering.
• Experience building and managing CI/CD pipelines with Jenkins or Harness.
• Experience with infrastructure as code, Kubernetes, and Docker.
• Experience integrating security tools such as SonarQube, OWASP, or Checkmarx into pipelines.
• Experience with CMDB and asset management tools such as ServiceNow and monitoring platforms such as Splunk, Prometheus, or Grafana.
• Ability to work across technical and non-technical stakeholders.
• Familiarity with NIST 800-53, FedRAMP, FISMA, or the Privacy Act.
• Experience with policy as code, such as OPA, and software supply chain security, including SBOMs and artifact signing.

Responsibilities

• Design, build, and maintain end-to-end CI/CD pipelines from source control to production.
• Automate deployment of AWS container, serverless, and virtual machine workloads across development, test, staging, and production environments.
• Support controlled releases, including blue/green or canary deployment and automated rollback.
• Maintain reusable pipeline standards, templates, and infrastructure-as-code patterns.
• Improve pipeline speed, reliability, and efficiency.
• Integrate unit, integration, functional, regression, and performance testing into pipelines.
• Automate security controls, including SAST, DAST, SCA, secrets detection, container and image scanning, and infrastructure-as-code scanning.
• Ensure pipelines and deployed solutions comply with security, credentialing, and privacy policies.
• Translate policy requirements into automated controls with security, privacy, and compliance stakeholders.
• Build dashboards and metrics for deployment performance and vulnerability remediation.
• Coach development and operations teams on secure coding, pipelines, and automation practices.

Skills

Degrees

Relocation