Senior DevSecOps Engineer

Fairfax, Virginia;
Arlington, Virginia

Secret

Hybrid schedule

IT Infrastructure & Network Engineering & Operations

GovCIO is currently hiring for a Senior Dev Sec Ops  Engineer to support our DEA Bluestone contract

This position is located in either Arlington or Merrifield, VA and is a hybrid position.

• Design, author, and maintain CI/CD pipelines in Git Hub Actions, including the reusable workflows application teams attach to their repositories.
• Operate and integrate the platform toolchain:
  Git Hub Enterprise and Git Hub Advanced Security (CodeQL, Dependabot, secret scanning), Sonar Qube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
• Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
• Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
• Deploy and manage DSOP Git Hub Runners, including runners placed in System Owner cloud accounts.
• Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
• Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.

High School with 10+ years (or commensurate experience)

• 5–8 years Dev Sec Ops /engineering experience.
• Production experience with Git Hub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
• Strong Terraform skills and hands‑on AWS experience;
  Kubernetes experience (EKS preferred).
• Working knowledge of SAST/SCA/secret‑scanning/container‑scanning tooling and how to wire it into a pipeline as a blocking gate.
• Proficiency in at least one scripting or programming language (Python, Go, Bash, or Power Shell).
• Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
• Agile SDLC experience.

Clearance Required:

Must have an active Secret clearance and be able to attain DEA suitability

• Azure Government Cloud experience alongside AWS.
• Istio, Rancher, Dynatrace, or Nexus IQ administration.
• Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
• Test automation and performance testing exposure (LEAPWORK, JMeter).
• Certifications such as AWS Solutions Architect / Dev Ops Engineer Professional, CKA, or Terraform Associate.

USD $ - USD $ /Yr.

GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.

But we can’t do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?

If you are selected to move forward through the process, here’s what you can expect:

• During the Interview Process
• Virtual video interview conducted via video with the hiring manager and/or team
• Camera must be on
• A valid photo  be presented during each interview
• During the Hiring Process
• Enhanced Biometrics  screening
• Background check, to include:
• Criminal history (past 7 years)
• Verification of your highest level of education
• Verification of your employment history (past 7 years), based on information provided in your application

At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the…