Government and Infrastructure - Cybersecurity - DevSecOps Senior Engineer

Job summary

The DevSecOps Senior Engineer assesses application delivery practices and security posture across a modernization portfolio, then builds the pipelines, controls, and automated evidence that integrate security into software delivery. The role engineers CI/CD pipelines with security testing and scanning, implements policy-as-code and continuous authorization evidence, hardens container environments, and establishes reusable DevSecOps standards. It also guides vulnerability remediation and supports client authorization reviews, using tools such as Jenkins, Terraform, SonarQube, and Kubernetes.

Benefits

Qualifications

• Three or more years of experience in DevOps, software engineering, or security engineering
• Hands-on CI/CD pipeline engineering with Jenkins, GitHub Actions, GitLab CI, or Azure DevOps
• Experience with at least one application security scanning tool
• Working knowledge of containers and Infrastructure-as-Code
• Scripting experience in Python, PowerShell, or Bash
• Understanding of the NIST Risk Management Framework, NIST SP 800-53, and secure software development lifecycle practices
• Ability to obtain and maintain a Secret-level security clearance
• Availability for in-person work as needed in the Washington, DC area

Responsibilities

• Assess application delivery toolchains and practices
• Assess application security posture, vulnerabilities, dependencies, SBOM availability, secrets handling, authentication, and POA&Ms
• Design, build, and maintain secure CI/CD pipelines with integrated security testing and quality gates
• Implement policy-as-code and automated evidence collection for continuous authorization and NIST SP 800-53 control traceability
• Harden container images and environments against DISA STIGs or CIS Benchmarks
• Establish governance gates for AI-assisted development, including provenance, human review, and traceability
• Define reusable DevSecOps patterns and pipeline templates
• Report delivery and security metrics, including DORA metrics and vulnerability aging
• Support vulnerability triage and remediation
• Own DevSecOps architecture and toolchain standards
• Lead consistent security-posture assessment across the application portfolio
• Coordinate with client cybersecurity and authorization stakeholders and prepare authorization review artifacts
• Mentor a Staff DevSecOps engineer

Skills

Certifications

Degrees

Travel

Industry

Security clearance

Relocation