Sr. DevSecOps Engineer

Description:
Onsite in washington, DC

Our client seeks a Sr. DevSecOps Engineer to design, secure, and operate CI/CD pipelines and cloud infrastructure across classified environments. You will lead automation with GitLab CI, Jenkins, and Infrastructure as Code, enforce STIG compliance, and guide teams on secure delivery practices. The role includes advanced Linux troubleshooting, mentoring junior engineers, and advising on ATO-aligned security controls in AWS.

This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $174,000 - $220,000/ yr. w2

#LI-JS1

Responsibilities:

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments.
• Develop CI/CD pipelines from scratch in GitLab CI and Jenkins with integrated security scanning and STIG compliance validation.
• Provide guidance to development teams on pipeline troubleshooting and DevSecOps best practices.
• Create and maintain Infrastructure as Code templates using CloudFormation to build secure, highly available DevSecOps tooling across AWS environments including GovCloud, C2S, and TC2S.
• Ensure STIG compliance across toolchains and infrastructure and mentor junior engineers on IaC best practices.
• Lead advanced troubleshooting by analyzing system and application logs with Linux command-line tools and conduct root cause analysis.
• Develop mitigation strategies for service degradation and operational incidents.
• Advise development teams on secure coding, STIG compliance, vulnerability remediation, and ATO-aligned practices.
• Mentor junior engineers through code reviews, technical guidance, documentation, and knowledge sharing.

Experience Requirements:

• Active TS/SCI Clearance with CI poly.
• 10+ years as a DevSecOps Engineer or similar with emphasis on infrastructure automation, scalability, and reliability.
• Expertise with DevOps practices, CI/CD pipelines, containerization, and automation tools such as Jenkins, GitLab CI/CD, Artifactory, SonarQube, and Prisma Cloud.
• Proven delivery of DevSecOps services across multiple classified domains.
• Expert understanding of AWS services such as EC2, S3, IAM, and RDS, and secure cloud architecture.
• Strong experience with Infrastructure as Code tools such as Terraform, CloudFormation, or Ansible.
• Strong scripting experience with Python and Bash in Linux environments such as RHEL or Oracle Linux.
• Minimum IAT Level 2 certification such as CompTIA Security+, GSEC, or SSCP.

Education Requirements:

• Minimum IAT Level 2 certification (e.g., CompTIA Security+, GSEC, SSCP).