DevSecOps Engineer, Python, CI​/CD

• Own a secure delivery path for federal systems
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, controlled promotion, and review evidence
• Build reproducible infrastructure-as-code environments with containerization, container-image scanning, least-privilege access, secrets management, and encryption
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback
• Handle incident response, pipeline reliability, and software-delivery performance metrics
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring
• Work in Amazon Web Services or client-managed on-premises environments
• Help create new capabilities, tools, and lines of business

• 4+ years of Dev Sec Ops  or platform engineering experience
• Bachelor’s Degree in Computer Science or related field
• Hands-on CI/CD pipeline automation with security gates, AWS-native (Code Pipeline, Code Build) or comparable (Git Hub Actions, Git Lab CI)
• Infrastructure-as-code (Cloud Formation or Terraform) and containerization
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning
• Scripting in Python or Bash
• Git-based version control
• Monitoring and logging
• Basic proficiency in writing, PowerPoint, and Excel
• Sole United States citizenship
• Ability to obtain a Public Trust determination
• Ability to commute into Washington, DC regularly
• Preferred:
  Federal security experience supporting FISMA compliance, implementing NIST SP 800-53 controls, and ATO support
• Preferred:
  Amazon Web Services certification
• Preferred:
  Kubernetes
• Preferred:
  Secrets management (Hashi Corp Vault, AWS Secrets Manager, or comparable)
• Preferred:
  Experience applying zero trust principles
• Preferred:
  Software supply-chain integrity practice, including SBOMs and artifact signing
• Preferred:
  Federal information technology experience
• Preferred:
  Familiarity with AI-assisted developer tooling

Demonstrates expertise in Dev Sec Ops  practices, including CI/CD pipeline automation, infrastructure-as-code, and automated security testing. Proficient in managing secure delivery paths for federal systems while ensuring compliance with FISMA and NIST standards.

• Dev Sec Ops  Experience
• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• Amazon Web Services

• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• Scripting in Python
• Scripting in Bash
• Git-based Version Control
• Monitoring and Logging
• Vulnerability Scanning
• Containerization
• Secrets Management

• Basic Proficiency in Writing
• Basic Proficiency in Power Point
• Basic Proficiency in Excel

• Amazon Web Services Certification

• FISMA Compliance
• NIST SP 800-53 Controls
• Authority to Operate
• Zero Trust Principles
• Software Supply-Chain Integrity
• SBOMs
• Artifact Signing
• Federal Information Technology

• Amazon Web Services
• Cloud Formation
• Terraform
• Kubernetes
• Hashi Corp Vault
• AWS Secrets Manager
• Git Hub Actions
• Git Lab CI
• Code Pipeline
• Code Build