Job Requirements
Top Secret Polygraph Unspecified
Career Level not specified
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.
Technology is our Passion. People are our Purpose.
We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind.
We believe happy employees do amazing work, so join our team NOW! We are currently seeking a Senior DevSecOps Engineer for a Full-Time position.
Job Summary:
Integrates security into CI/CD pipelines, cloud environments, and development workflows so teams can deliver software quickly and safely. Owns pipeline architecture, automated security gating, and infrastructure-as-code standards.
Key Responsibilities
· Design, build, and maintain CI/CD pipelines with embedded security gates.
· Implement SAST, DAST, SCA, container image scanning, and infrastructure-as-code scanning across the toolchain.
· Manage secrets, credentials, certificates, and privileged access within automated workflows.
· Author and maintain infrastructure-as-code for repeatable, auditable environment provisioning.
· Instrument monitoring, logging, and alerting to support operational and security visibility.
· Support ATO, continuous monitoring, and security control evidence generation.
· Coach development teams on secure delivery practices and shift-left adoption.
Minimum Qualifications
· Minimum Education: Bachelor's degree in Information Technology, Computer Science, or Cybersecurity.
· Minimum Experience: Five (5) to eight (8) years of DevSecOps or DevOps engineering experience.
· Certifications - Required: One current certification among: AWS Certified Security - Specialty, Microsoft Certified Azure Security Engineer Associate, Certified Kubernetes Administrator (CKA), or CompTIA Security+.
· Certifications - Obtainable After Hire: Certified Kubernetes Security Specialist (CKS) or HashiCorp Certified: Terraform Associate, within 180 days of assignment.
· Certifications - Preferred: CISSP; Certified DevSecOps Professional (CDP); AWS or Azure DevOps Engineer Expert.
· Required Skills: CI/CD security; SAST and DAST; container security; secrets management; infrastructure-as-code scanning; pipeline automation; cloud security configuration.
· Preferred Skills: Kubernetes and container orchestration; cloud-native monitoring; federal ATO and continuous monitoring support.
Technical Environment
Jenkins, GitHub Actions, GitLab CI, and Azure DevOps Pipelines; Terraform and Ansible; Docker, Kubernetes, and Helm; SonarQube, Fortify, and Checkmarx for SAST; OWASP ZAP and Burp Suite for DAST; Snyk, Trivy, and Anchore for software composition and image scanning; HashiCorp Vault and AWS Secrets Manager; Splunk and the ELK Stack; Prometheus and Grafana; AWS and Azure; NIST SP 800-53 control mapping and continuous monitoring evidence.
Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now!!
Our Profile:
We are an IT company with a unique mission-to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed.Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More .
NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!
Technology is our Passion. People are our Purpose.
We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it's a state of mind.
We believe happy employees do amazing work, so join our team NOW! We are currently seeking a Senior DevSecOps Engineer for a Full-Time position.
Job Summary:
Integrates security into CI/CD pipelines, cloud environments, and development workflows so teams can deliver software quickly and safely. Owns pipeline architecture, automated security gating, and infrastructure-as-code standards.
Key Responsibilities
· Design, build, and maintain CI/CD pipelines with embedded security gates.
· Implement SAST, DAST, SCA, container image scanning, and infrastructure-as-code scanning across the toolchain.
· Manage secrets, credentials, certificates, and privileged access within automated workflows.
· Author and maintain infrastructure-as-code for repeatable, auditable environment provisioning.
· Instrument monitoring, logging, and alerting to support operational and security visibility.
· Support ATO, continuous monitoring, and security control evidence generation.
· Coach development teams on secure delivery practices and shift-left adoption.
Minimum Qualifications
· Minimum Education: Bachelor's degree in Information Technology, Computer Science, or Cybersecurity.
· Minimum Experience: Five (5) to eight (8) years of DevSecOps or DevOps engineering experience.
· Certifications - Required: One current certification among: AWS Certified Security - Specialty, Microsoft Certified Azure Security Engineer Associate, Certified Kubernetes Administrator (CKA), or CompTIA Security+.
· Certifications - Obtainable After Hire: Certified Kubernetes Security Specialist (CKS) or HashiCorp Certified: Terraform Associate, within 180 days of assignment.
· Certifications - Preferred: CISSP; Certified DevSecOps Professional (CDP); AWS or Azure DevOps Engineer Expert.
· Required Skills: CI/CD security; SAST and DAST; container security; secrets management; infrastructure-as-code scanning; pipeline automation; cloud security configuration.
· Preferred Skills: Kubernetes and container orchestration; cloud-native monitoring; federal ATO and continuous monitoring support.
Technical Environment
Jenkins, GitHub Actions, GitLab CI, and Azure DevOps Pipelines; Terraform and Ansible; Docker, Kubernetes, and Helm; SonarQube, Fortify, and Checkmarx for SAST; OWASP ZAP and Burp Suite for DAST; Snyk, Trivy, and Anchore for software composition and image scanning; HashiCorp Vault and AWS Secrets Manager; Splunk and the ELK Stack; Prometheus and Grafana; AWS and Azure; NIST SP 800-53 control mapping and continuous monitoring evidence.
Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now!!
Our Profile:
We are an IT company with a unique mission-to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed.Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More .
NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!
group id: 10243825