Senior DevSecOps Engineer

U.S. Citizen or Permanent Resident (Required)

Sprezzatura is seeking a Senior Dev Sec Ops /Security Compliance Engineer to serve as the technical security engineering lead supporting cybersecurity modernization for the Department of Veterans Affairs (VA). The Senior Dev Sec Ops  Engineer will lead hands-on engineering efforts to identify and remediate security and control deficiencies across the platform's cloud infrastructure, CI/CD pipelines, shared platform services, and supporting systems.

This position will help move the Platform toward a modern, engineering-first approach to cybersecurity by translating security requirements and identified control gaps into durable technical solutions. This role will work closely with security and RMF personnel to translate control deficiencies, vulnerabilities, assessment findings, and Plans of Action and Milestones (POA&Ms) into actionable engineering work. The Senior Dev Sec Ops  Engineer will then lead or directly implement remediation through infrastructure, configuration, access policy, system rules, pipeline, and code changes.

The ideal candidate combines deep cloud and Dev Sec Ops  engineering experience with a strong understanding of cybersecurity, vulnerability remediation, secure software delivery, and federal security requirements. This individual should be comfortable operating as both a hands-on senior engineer and technical security SME in a complex, large-scale cloud environment. This position will participate in a 24/7 on-call rotation.

• Serve as the team's senior technical security engineering lead and Security Engineering Subject Matter Expert (SME)
• Lead hands-on remediation of security vulnerabilities, control deficiencies, and technical security debt across platform infrastructure and shared services
• Translate security control requirements, assessment findings, vulnerabilities, and POA&Ms into actionable engineering solutions
• Implement security remediation through code, infrastructure, configuration, system rules, access policies, and other technical changes
• Design, implement, and maintain automated security quality gates within Git Hub Actions and platform CI/CD pipelines
• Integrate and improve capabilities including SAST, DAST, Software Composition Analysis (SCA), secrets detection, dependency scanning, and other automated security checks
• Develop and maintain secure configuration baselines for cloud infrastructure and Platform components
• Implement and improve centralized secrets management and secure credential-handling practices
• Lead vulnerability remediation efforts across AWS infrastructure, containers, applications, dependencies, CI/CD pipelines, and shared Platform components
• Provision, secure, and sustain resilient CI/CD runner infrastructure within VA cloud environments
• Implement automation supporting patching, vulnerability remediation, and security configuration management
• Improve security logging, monitoring, and alerting capabilities to support timely detection and response to security events
• Integrate Platform systems with security monitoring and telemetry capabilities, including applicable CSOC and continuous-monitoring requirements
• Configure and improve cloud-native security capabilities such as AWS Guard Duty, AWS Security Hub CSPM, and related AWS security services
• Lead or support technical implementation associated with DAST/WASA, SAST, secrets detection, and runtime security
• Partner with RMF and security personnel to determine appropriate technical remediation for NIST SP 800-53 control deficiencies
• Partner with the Security Automation Engineer to ensure implemented controls generate reliable security evidence and measurable security posture data
• Provide hands-on technical guidance to product and engineering teams implementing security requirements
• Lead technical planning and requirements definition when remediation requires coordination across multiple systems or engineering teams
• Document implemented security controls, technical remediation, architecture decisions, and operational procedures necessary to sustain improvements
• Participate in technical reviews, incident response, troubleshooting, and a 24/7 engineering on-call rotation as required

• Bachelor's degree and 10+ years of relevant experience, or equivalent combination of education and experience
• Significant hands‑on experience in Dev Sec Ops ,…