Job Description
DevSecOps Engineer (Kubernetes, CI/CD)
\n
Washington, District of Columbia
\n
Hybrid 3 days in Office, 2 Days Remote
\n
The initial engagement requires United States citizenship
\n
\n
This is a 3 days hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.
\n
\n
Job Description:
\n
- \n
- Create secure, cloud-native infrastructure in Amazon Web Services (AWS), develop the continuous integration and continuous delivery (CI/CD) pipelines used to deploy to that infrastructure, and maintain both.
- Capture that infrastructure in code, using Terraform or CloudFormation.
- Build security into the delivery path with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), vulnerability scanning, and secrets management.
- Support the workloads that run on Docker and Kubernetes, and run down faults in infrastructure, networking, deployments, and security.
- Script the repeatable operational work, and automate provisioning and releases so that health checks and rollback are built in and every run produces its compliance evidence.
- Put National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls in place, and keep authorization and continuous monitoring evidence up to date.
- Use Python, and Bash when appropriate, to automate the work; speed it up with AI-assisted tools; and improve the quality of everything that ships.
\n
\n
\n
\n
\n
\n
\n
\n
\n
Requirements
\n
- \n
- 4+ years of experience in DevSecOps or platform engineering
- A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
- Practical experience creating security-gated CI/CD pipelines in AWS-native tools (CodeBuild, CodePipeline) or in comparable tools (GitLab CI, GitHub Actions)
- A background in standing up Kubernetes clusters and running them
- Practical work containerizing applications and creating Docker images, plus infrastructure as code in CloudFormation or Terraform
- Vulnerability scanning, along with automated security testing like SAST, DAST, and SCA
- Ability to program and script in Python (Bash skills a plus)
- Proficiency working in Linux operating systems and writing shell scripts
- Strong knowledge of networking, including routing and load balancing, along with application programming interfaces and the way web applications are architected
- Using Git to track and manage versions
- A background in both logging and monitoring
- Experience generating code, reviewing it, and validating it with AI-assisted development tools, for example GitHub Copilot
- Proficiency in writing, PowerPoint, and Excel
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Preferred
\n
- \n
- Prior work in information technology for the federal government
- A background in secrets management using tools such as AWS Secrets Manager, HashiCorp Vault, or a similar product
- A federal security background covering NIST SP 800-53 control implementation, Authority to Operate (ATO) support, and support for Federal Information Security Modernization Act (FISMA) compliance
- Certification from AWS
\n
\n
\n
\n
\n
\n
Benefits
\n
Benefits include medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) with an employer match of up to 4% of salary; unlimited paid time off; and sponsored professional certifications and continuing education.