4371 DevSecOps Engineer

OVERVIEW:

We are seeking a skilled DevSecOps Engineer to design, implement, and maintain secure, scalable cloud infrastructure and CI/CD pipelines supporting mission-critical applications. This role will focus on automating infrastructure, embedding security into the software development lifecycle, and managing cloud-native services in AWS. The ideal candidate has strong experience with AWS services, containerization, infrastructure as code, automation, and Linux system administration, and is passionate about building secure and resilient environments.

GENERAL DUTIES:

• Design, implement, and maintain secure DevSecOps pipelines using GitHub and Jenkins/CloudBees.
• Deploy and manage cloud infrastructure in AWS using Infrastructure as Code (Terraform and Ansible).
• Administer and optimize AWS services including EC2, ECS, RDS (Oracle/Postgres), ALBs, MSK, S3, Lambda, OpenSearch, and Amazon MQ.
• Manage networking and security configurations across VPCs, IAM roles/policies, and security groups.
• Build and maintain containerized applications using Docker.
• Automate system administration tasks using Python and Linux shell scripting.
• Manage and monitor environments using CloudWatch and logging platforms.
• Implement and maintain secrets management using HashiCorp Vault.
• Perform RHEL/Linux system administration including patching, hardening, and troubleshooting.
• Support security best practices such as least privilege access, vulnerability remediation, and pipeline security scanning.
• Collaborate with development teams to integrate security and automation into the software delivery lifecycle.
• Troubleshoot infrastructure, application, and pipeline issues across development and production environments.
• Participate in operational support, deployments, and system reliability improvements.

REQUIRED QUALIFICATIONS:

• Willingness to travel to Crystal City, VA 2-4 times per month.
• 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, or Site Reliability Engineering roles.
• Strong experience with AWS cloud services, including:
  • o EC2, EBS
  • o ECS
  • o RDS (Oracle and PostgreSQL administration)
  • o Application Load Balancers
  • o CloudWatch
  • o MSK
  • o S3
  • o VPC networking
  • o Lambda
  • o OpenSearch
  • o Amazon MQ (ActiveMQ)
  • o IAM
• Experience with Infrastructure as Code tools (Terraform, Ansible).
• Strong Linux administration skills (RHEL preferred).
• Experience writing automation scripts using Python and Bash/Linux shell.
• Experience building and managing CI/CD pipelines using GitHub and Jenkins/CloudBees.
• Hands-on experience with Docker containerization.
• Experience implementing secure secrets management solutions such as HashiCorp Vault.
• Strong troubleshooting and debugging skills across cloud infrastructure and application environments.

DESIRED QUALIFICATIONS:

• Experience implementing DevSecOps practices and security automation.
• Experience supporting federal government environments.
• Familiarity with container orchestration and microservices architectures.
• Experience with observability, monitoring, and log aggregation platforms.
• AWS certifications such as AWS Certified Solutions Architect, DevOps Engineer, or SysOps Administrator.
• Security certifications such as Security+, CISSP, or similar.

CLEARANCE:

• U.S. Citizenship required with the ability to obtain and maintain a Public Trust