Jobs / Cre***
Senior DevSecOps Engineer, Lead
Cre*** · Tysons, VA, United States
Tysons, VA, United StatesExp: 7+ yrs170,000-200,000 USD/yearlyHybrid
Remuneration
170,000-200,000 USD/yearly
Location
Tysons, VA, United States
Visa sponsorship
Sponsors visa
Job summary
The Senior DevSecOps Engineer designs and maintains secure, scalable AWS GovCloud environments for mission-critical federal applications. The role builds CI/CD pipelines, automates infrastructure with Terraform, CloudFormation, and Ansible, and supports compliance with federal frameworks including NIST, RMF, FedRAMP, and STIGs. It also manages container platforms, security testing, monitoring, and automation using tools such as Kubernetes, AWS security services, Python, and Bash.
Benefits
Medical, dental, and vision coverage401(k) and IRA retirement plansLife insurancePaid vacation, sick leave, and public holidaysMaternity and paternity leaveShort-term and long-term disabilityTraining and developmentWellness resources
Qualifications
- U.S. citizenship and ability to obtain a DoD Secret security clearance.
- Security+ certification.
- At least 7 years of hands-on experience in DevSecOps, cloud engineering, or infrastructure automation.
- Expertise in AWS GovCloud services, security configurations, and compliance frameworks.
- Experience with CI/CD tools such as GitLab CI/CD, Jenkins, or AWS Code Pipeline.
- Hands-on experience with Terraform, CloudFormation, and Ansible.
- Proficiency with Docker, Kubernetes, EKS, ECS, and Fargate.
- Understanding of AWS IAM, GuardDuty, Security Hub, KMS, WAF, Config, and Secrets Manager.
- Knowledge of RMF, NIST 800-171, NIST 800-53, STIGs, and Zero Trust.
- Experience with SAST, DAST, vulnerability scanning, and SBOM management.
- Proficiency in Python, Bash, or PowerShell for automation and security enforcement.
Responsibilities
- Design, implement, and maintain secure, scalable AWS GovCloud environments for federal applications.
- Build and optimize CI/CD pipelines using GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform.
- Apply federal cybersecurity frameworks, security baselines, STIGs, and automated security scanning.
- Automate infrastructure provisioning and configuration with Terraform, CloudFormation, and Ansible.
- Deploy and manage Docker containers and Kubernetes clusters, including EKS, ECS, and Fargate.
- Implement monitoring, logging, and compliance reporting with AWS CloudWatch, Security Hub, GuardDuty, Splunk, or ELK.
- Develop automation scripts using Python, Bash, or PowerShell.
- Collaborate with software developers, cybersecurity teams, and cloud engineers to integrate security into the SDLC.
Skills
AnsibleAWSAWS KMSBashCloudFormationCloudWatchDockerECSEKSFargateGitLabGitLab CIIAMJenkinsKubernetesPowerShellPythonSecrets ManagerSplunkTerraformElasticsearch
Certifications
Security+
Industry
Federal governmentDefenseCivilian agencies
Security clearance
DoD Secret
Relocation
No