DevSecOps Manager; Government​/FedRAMP Focus

Position Summary

We are seeking a hands-on Dev Sec Ops  Manager to lead the security, Dev Ops, and cloud platform operations for a multi-cloud environment supporting enterprise and government-focused applications. This is a player/coach role where you'll provide technical leadership while actively contributing to engineering, security, and operational initiatives.

The ideal candidate has a strong background in cloud security, Dev Sec Ops , CI/CD, incident response, compliance (FedRAMP/SOC
2), and team leadership
. This position offers excellent long‑term growth into senior leadership.

• Lead the security strategy across AWS, Azure, and Google Cloud environments.
• Own threat modeling, security architecture, identity and access management, encryption, logging, and secure configuration standards.
• Lead incident response activities, including investigation, containment, recovery, and post‑incident reviews.
• Improve vulnerability management and security monitoring processes.

• Design, implement, and manage secure CI/CD pipelines.
• Support migration and modernization of Dev Ops platforms and deployment processes.
• Implement security controls including:
  • SAST
  • SCA
  • Secrets scanning
  • Infrastructure‑as‑Code (IaC) scanning
  • Environment protection
  • Automated compliance evidence collection
• Develop Infrastructure‑as‑Code standards using tools such as Terraform, Cloud Formation, Bicep, or Pulumi.
• Support Kubernetes and virtual machine‑based application deployments.

• Drive engineering initiatives supporting SOC 2 and FedRAMP Moderate compliance.
• Translate security and compliance requirements into automated engineering controls.
• Develop operational documentation, security standards, and audit‑ready evidence.
• Partner with internal compliance and audit teams to support assessments.

• Lead, mentor, and develop a small Dev Sec Ops , SOC, and platform engineering team.
• Establish operational best practices, change management processes, incident reviews, and continuous improvement initiatives.
• Foster a culture of automation, security, accountability, and operational excellence.

• 7+ years of experience in Dev Sec Ops , Security Engineering, Platform Engineering, Site Reliability Engineering (SRE), or related roles.
• Experience designing and managing secure CI/CD pipelines using Azure Dev Ops, Git Hub Actions, or similar platforms.
• Strong hands‑on experience with AWS, Azure, or Google Cloud (experience in multiple cloud environments preferred).
• Experience implementing cloud security best practices including IAM, least privilege, encryption, and secure networking.
• Hands‑on experience leading security incident response and vulnerability management.
• Experience with SIEM platforms (Elastic preferred) and vulnerability management tools (Qualys preferred).
• Experience securing Windows environments and endpoint management.
• Strong leadership, communication, and mentoring skills.
• Ability to work onsite in Fairfax, VA.
• U.S. Citizenship required.

• Experience supporting FedRAMP Moderate, NIST 800‑53, or SOC 2 compliance initiatives.
• Kubernetes security experience including RBAC, network policies, workload identity, and admission controls.
• Experience with software supply chain security, including SBOM, artifact signing, dependency management, and OIDC authentication.
• Experience managing enterprise device fleets, patch management, staged deployments, rollback strategies, and endpoint security.
• Knowledge of PKI, certificate lifecycle management, HSM, KMS, and credential management.
• Experience implementing Infrastructure‑as‑Code using Terraform, Cloud Formation, Bicep, or Pulumi.

The successful candidate will be a technical leader who enjoys solving complex security and infrastructure challenges while mentoring engineering teams. They should have experience building secure cloud platforms, automating security controls, improving operational efficiency, and supporting compliance initiatives in highly regulated environments.

• Dev Sec Ops
• Cloud Security
• AWS, Azure & Google Cloud
• CI/CD Pipelines
• Git Hub Actions & Azure Dev Ops
• Kubernetes
• Infrastructure as Code (Terraform, Cloud Formation, Bicep, Pulumi)
• FedRAMP & SOC 2 Compliance
• NIST 800‑53
• Incident Response
• Vulnerability Management
• SIEM (Elastic)
• Qualys
• Windows Security
• Identity & Access Management (IAM)
• Infrastructure Automation
• Team Leadership