DevSecOps Engineer, AWS Secure Delivery

• Own assigned delivery pipelines, automation, and environments carrying federal systems into production
• Implement and operate CI/CD pipelines with built-in security gates
• Automate security testing, including SAST, DAST, and SCA
• Implement policy-as-code checks and controlled promotion
• Define infrastructure as code and create reproducible environments
• Build in containerization, container-image scanning, least-privilege access, secrets management, and encryption
• Maintain monitoring, logging, vulnerability scanning, and incident-response practices
• Implement progressive delivery and low-downtime deployment strategies, including blue/green and canary deployments
• Configure automated health checks and rollback
• Track pipeline reliability and software-delivery performance metrics
• Produce evidence supporting ATO and continuous monitoring
• Work in AWS or a client-managed, on-premises environment
• Help launch new capabilities, tools, and lines of business

• At least four years of Dev Sec Ops  or platform engineering experience
• Bachelor's degree in computer science or a related field
• Hands-on CI/CD pipeline automation with security gates, using AWS-native tools (Code Pipeline, Code Build) or comparable tools (Git Hub Actions, Git Lab CI)
• Infrastructure as code using Cloud Formation or Terraform
• Containerization
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning
• Scripting in Python or Bash
• Git-based version control
• Monitoring and logging
• Basic proficiency in writing, PowerPoint, and Excel
• Sole United States citizenship
• Ability to obtain a Public Trust determination
• Willingness and ability to commute into DC regularly
• Preferred:
  Federal security experience supporting FISMA compliance, implementing NIST SP 800-53 controls, and providing ATO support
• Preferred:
  An Amazon Web Services certification
• Preferred:
  Kubernetes
• Preferred:
  Secrets management with Hashi Corp Vault, AWS Secrets Manager, or a comparable tool
• Preferred:
  Experience applying zero trust principles, including identity-centered access, least privilege, and continuous verification
• Preferred:
  Software supply-chain integrity practice, including SBOMs and artifact signing
• Preferred:
  Federal information technology experience
• Preferred:
  Familiarity with AI-assisted developer tooling

Demonstrates expertise in Dev Sec Ops  practices, including CI/CD pipeline automation, infrastructure as code, and automated security testing. Proficient in managing federal systems and ensuring compliance with security standards and policies.

• Dev Sec Ops  Experience
• CI/CD Pipeline Automation
• Infrastructure As Code
• Automated Security Testing
• AWS Native Tools

• CI/CD Pipeline Automation
• Infrastructure As Code
• Automated Security Testing
• Scripting In Python
• Containerization
• Git-Based Version Control
• Monitoring And Logging
• Vulnerability Scanning
• Policy-As-Code Checks
• Progressive Delivery Strategies

• Basic Proficiency In Writing
• Basic Proficiency In Power Point
• Basic Proficiency In Excel

• Amazon Web Services Certification

• FISMA Compliance
• NIST SP 800-53 Controls
• ATO Support
• Zero Trust Principles
• Federal Information Technology

• AWS
• Cloud Formation
• Terraform
• Git Hub Actions
• Git Lab CI
• Hashi Corp Vault
• AWS Secrets Manager
• Kubernetes