Senior DevSecOps Engineer

Job summary

The Senior DevSecOps Engineer designs and operates a secure software delivery platform for ML-enabled applications in AWS GovCloud that process CUI, PII, and PHI. The role owns GitLab CI/CD architecture, security scanning, policy enforcement, compliance evidence, and migration from GitHub, while delivering production Amazon EKS workloads through GitOps in environments governed by NIST 800-53, FedRAMP, and DoD SRG requirements.

Benefits

Qualifications

• At least 5 years of DevSecOps or DevOps engineering experience supporting production AWS environments.
• Hands-on CI/CD expertise, including integrated security scanning, policy-enforced approvals, and runner administration.
• Experience implementing gated DevSecOps controls that block on findings, enforce approvals, and produce auditable evidence.
• Hands-on Amazon EKS expertise, including cluster hardening, OCI-compliant image management, Helm, and GitOps.
• Terraform proficiency, including modular design, state management, and multi-environment promotion.
• Understanding of cloud security compliance frameworks and their translation into technical controls and pipeline gates.
• Python or Bash scripting proficiency for operational automation and security tooling.
• Bachelor's degree in a related technical field.
• Ability to obtain and maintain a Secret clearance; active Secret clearance preferred.
• Strong written communication and ability to work effectively in remote, cross-functional teams.

Responsibilities

• Design, implement, and operate enterprise GitLab CI/CD pipelines, including reusable templates, orchestration, and promotion gates.
• Configure and tune GitLab Ultimate security scanning and vulnerability management as required pipeline gates.
• Enforce security and compliance policies across projects and provide audit evidence for authorization and continuous monitoring.
• Generate and manage SBOMs, enforce dependency and license policies, and sign and verify build artifacts and container images.
• Operate hardened, isolated, and autoscaling GitLab Runner fleets in GovCloud and implement keyless GitLab-to-AWS authentication.
• Manage production Amazon EKS lifecycle, networking, and security; deploy workloads using Helm and GitOps tooling.
• Lead migration of repositories, pipelines, and integrations from GitHub Actions to GitLab.
• Mentor engineers and create secure delivery runbooks and pipeline documentation.

Skills

Certifications

Degrees

Industry

Security clearance

Relocation