Dev​/Sec Ops Engineer

Summary

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Mid‑Level Dev Sec Ops  Engineer to augment the Congressional Budget Office's (CBO) engineering team and mature its infrastructure automation, CI/CD pipeline, container orchestration, and security‑hardened delivery practices. The engineer inherits established patterns and incrementally enhances capabilities within an active production, hybrid‑cloud environment.

• Maintain, extend, and refactor Terraform and Open Tofu codebases, including modular configurations, remote state, and backend management within approved change control.
• Develop and maintain Ansible playbooks and roles for configuration, compliance enforcement, patch management, and application deployment.
• Build and improve Git Hub Actions workflows with security gates including SAST, dependency scanning, secrets detection, and policy‑as‑code validation.
• Support containerized delivery using Docker and Kubernetes, authoring hardened images, manifests, and Helm charts, with vulnerability scanning prior to deployment.
• Integrate Shift‑Left security throughout the delivery lifecycle, enforcing CIS benchmarks and CBO baselines and supporting NIST SP 800-53 and FISMA compliance.
• Work within CBO's version control, change management, and peer review workflows; push no changes to production without following the change advisory process.
• Produce and maintain documentation, runbooks, and compliance artifacts to support audits and assessments.
• Participate in stand‑ups, sprint planning, and technical reviews, and conduct knowledge transfer with CBO engineering staff.

• Strong Infrastructure‑as‑Code and Configuration‑as‑Code skills.
• CI/CD pipeline engineering with integrated security gates.
• Container hardening and orchestration proficiency.
• Familiarity with policy‑as‑code and secrets management.
• Collaborative, standards‑driven engineering approach.

• Minimum of 5 years of Dev Sec Ops  or infrastructure automation experience.
• Hands‑on experience with Terraform/Open Tofu, Ansible, and Git Hub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning (Trivy, Grype, or equivalent).
• Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect‑Secrets), and OPA/Rego.
• Federal or highly regulated environment experience preferred.

Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.

No specific certification is required. Certified Kubernetes Administrator (CKA) or Hashi Corp Terraform Associate is preferred.

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance, obtained through a U.S. Capitol Police background check, prior to accessing the CBO network.

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.