DevSecOps Engineer, AWS

• Own a secure delivery path for federal systems
• Build CI/CD pipelines with automated security testing, policy-as-code checks, controlled promotion, and review evidence
• Create reproducible infrastructure-as-code environments with containerization, image scanning, least-privilege access, secrets management, and encryption
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback
• Respond to incidents and track pipeline reliability and software-delivery performance metrics
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring
• Work in AWS or client-managed on-premises environments
• Help develop new capabilities, tools, and lines of business

• 4+ years of Dev Sec Ops  or platform engineering experience
• Bachelor's Degree in Computer Science or related field
• Hands-on CI/CD pipeline automation with security gates, AWS-native (Code Pipeline, Code Build) or comparable (Git Hub Actions, Git Lab CI)
• Infrastructure-as-code (Cloud Formation or Terraform) and containerization
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning
• Scripting in Python or Bash
• Git-based version control
• Monitoring and logging
• Basic proficiency in writing, PowerPoint, and Excel
• Sole United States citizenship
• Ability to obtain a Public Trust determination
• Ability to commute into Washington, DC regularly
• Preferred:
  Federal security experience supporting FISMA compliance, implementing NIST SP 800-53 controls, and ATO support
• Preferred:
  Amazon Web Services certification
• Preferred:
  Kubernetes
• Preferred:
  Secrets management (Hashi Corp Vault, AWS Secrets Manager, or comparable)
• Preferred:
  Experience applying zero trust principles
• Preferred:
  Software supply-chain integrity practices including SBOMs and artifact signing
• Preferred:
  Federal information technology experience
• Preferred:
  Familiarity with AI-assisted developer tooling

Demonstrates expertise in building and managing CI/CD pipelines with a focus on security automation, infrastructure-as-code, and vulnerability management. Proficient in AWS environments and federal compliance standards, with a strong foundation in scripting and monitoring.

• Dev Sec Ops  Experience
• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• AWS Native Tools

• CI/CD Pipeline Automation
• Infrastructure-as-Code
• Automated Security Testing
• Scripting in Python
• Scripting in Bash
• Monitoring and Logging
• Vulnerability Scanning
• Git-Based Version Control
• Containerization
• Secrets Management

• Communication
• Problem-Solving
• Collaboration

• Amazon Web Services Certification

• Federal Security Experience
• FISMA Compliance
• NIST SP 800-53 Controls
• Authority to Operate (ATO)
• Zero Trust Principles
• Software Supply-Chain Integrity
• SBOMs
• Artifact Signing
• Federal Information Technology Experience
• AI-Assisted Developer Tooling

• AWS
• Cloud Formation
• Terraform
• Code Pipeline
• Code Build
• Git Hub Actions
• Git Lab CI
• Hashi Corp Vault
• AWS Secrets Manager
• Kubernetes