DevSecOps Engineer – Mid-Level

Clearance Required: Public Trust Tier 2
Company: Nationwide IT Services
Location: Remote / Customer Site as Required

Nationwide IT Services is seeking a Mid-Level DevSecOps Engineer to support secure infrastructure automation and software delivery for a federal customer. The engineer will extend the customer’s existing DevSecOps environment using approved tools and established standards, with a focus on infrastructure as code, configuration automation, CI/CD security, container delivery, and security control alignment.
This role requires hands-on experience with Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, and DevSecOps security tooling. The selected candidate will inherit existing customer standards and will not introduce new tools without approval.
Responsibilities

• Develop and maintain infrastructure as code using Terraform and OpenTofu.
• Support modular IaC configurations, remote state management, and change-controlled deployments.
• Build and maintain Ansible playbooks and roles, including secure secrets handling with Ansible Vault.
• Implement and support GitHub Actions CI/CD pipelines with embedded security gates.
• Integrate SAST, IaC scanning, secrets scanning, and policy-as-code checks into delivery pipelines.
• Harden Docker images and support Kubernetes manifests and Helm charts.
• Perform container image scanning and remediation using tools such as Trivy or Grype.
• Align security implementation with CIS benchmarks and NIST SP 800-53, 800-171, and 800-207 control families.
• Support secure automation practices across infrastructure, application delivery, and container environments.
• Work within existing customer-approved standards, processes, and tools.

Required Qualifications

• Mid-level hands-on experience with Terraform and/or OpenTofu.
• Experience building and maintaining Ansible playbooks and roles.
• Experience with GitHub Actions CI/CD pipelines.
• Familiarity with embedded security gates, including:
  • SAST tools such as Semgrep
  • IaC scanning tools such as Checkov or tfsec
  • Secrets scanning tools such as Gitleaks
  • Policy-as-code using OPA/Rego
• Experience with Docker image hardening.
• Experience with Kubernetes manifests and Helm.
• Experience with container image scanning tools such as Trivy or Grype.
• Knowledge of CIS benchmarks and NIST security controls.
• Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.

Preferred Qualifications

• Federal government or FedRAMP experience.
• AWS experience.
• HashiCorp Vault experience.
• Python and/or Bash scripting experience.

Preferred Certifications

• HashiCorp Terraform Associate
• CKA or CKAD
• AWS certification
• CompTIA Security+

Key Technical Skills
Terraform, OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, Semgrep, Checkov, tfsec, Gitleaks, OPA/Rego, Trivy, Grype, CIS Benchmarks, NIST SP 800-53, NIST SP 800-171, NIST SP 800-207.
Company Overview
Working at Nationwide IT Services means being part of a company grounded in purpose, resilience, and a genuine commitment to people. Since its founding in 2006, NIS has focused on delivering exceptional services to government customers while supporting the nation, taxpayers, and citizens. NIS continues to evolve by embracing remote work, enhancing wellness initiatives, and investing in modern technology while staying true to its mission.