Senior DevSecOps Engineer

GovCIO is currently hiring for a Senior Dev Sec Ops  Engineer to support our DEA Bluestone contract

This position is located in either Arlington or Merrifield, VA and is a hybrid position.

• Design, author, and maintain CI/CD pipelines in Git Hub Actions, including the reusable workflows application teams attach to their repositories.
• Operate and integrate the platform toolchain:
  Git Hub Enterprise and Git Hub Advanced Security (CodeQL, Dependabot, secret scanning), Sonar Qube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
• Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
• Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
• Deploy and manage DSOP Git Hub Runners, including runners placed in System Owner cloud accounts.
• Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
• Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.

High School with 10+ years (or commensurate experience)

• 5–8 years Dev Sec Ops /engineering experience.
• Production experience with Git Hub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
• Strong Terraform skills and hands-on AWS experience;
  Kubernetes experience (EKS preferred).
• Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
• Proficiency in at least one scripting or programming language (Python, Go, Bash, or Power Shell).
• Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
• Agile SDLC experience.

Clearance Required:

Must have an active Secret clearance and be able to attain DEA suitability

• Azure Government Cloud experience alongside AWS.
• Istio, Rancher, Dynatrace, or Nexus IQ administration.
• Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
• Test automation and performance testing exposure (LEAPWORK, JMeter).
• Certifications such as AWS Solutions Architect / Dev Ops Engineer Professional, CKA, or Terraform Associate.

USD $ - USD $ /Yr.