DevSecOps Engineer
Durga Rao DallyUnited StatesMIDPosted 2h ago
JenkinsGitHub ActionsGitLab CISASTDASTSCAKubernetesDockerTerraformCloudFormationAWSAzureSonarQubeOpen Policy Agent
About the Role
We are seeking experienced DevSecOps Engineers to support secure software development, CI/CD automation, cloud infrastructure, and platform engineering for potential federal digital modernization initiatives.
Key Responsibilities
• Design, implement, and maintain CI/CD pipelines using tools like Jenkins, GitHub Actions, or GitLab CI
• Integrate application security tools including SAST, DAST, SCA, vulnerability scanning, and automated security quality gates
• Apply strong knowledge of containerization, Kubernetes, Docker, Infrastructure as Code (Terraform, CloudFormation), and cloud platforms (AWS or Azure)
• Automate deployments, improve developer workflows, and support platform monitoring, troubleshooting, and operational reliability
Requirements
• Experience with software supply chain security, SBOM generation, secrets management, and policy-as-code
• Ability to automate deployments and improve developer workflows
• Experience with NIST security standards, FedRAMP, and federal cybersecurity requirements preferred
• Knowledge of SonarQube, Open Policy Agent, artifact signing, and secure deployment practices preferred
• AWS, Azure, Kubernetes, or security certifications are a plus