DevSecOps Engineer

Job Overview

XPECT Solutions is seeking a DevSecOps Engineer to support our Federal Government Customer with delivering secure, cloud-based mission systems. The Engineer will design, automate, and harden CI/CD pipelines and AWS infrastructure that host production workloads, embedding security controls throughout the build, deploy, and runtime lifecycle. This role partners closely with development, operations, and security teams to accelerate delivery while maintaining compliance with federal security requirements (NIST 800-53, FedRAMP, DHS 4300A).

Core Responsibilities

• Design, build, and maintain secure CI/CD pipelines using Jenkins/CloudBees, GitHub, and Ansible to automate build, test, and deployment of containerized applications.
• Arcitect and manage AWS infrastructure (EC2, ECS, EBS, RDS, S3, VPC, Lambda, ALBs, OpenSearch, MSK, Amazon MQ, IAM, CloudWatch) supporting production workloads.
• Author and maintain infrastructure-as-code using Terraform and Ansible to provision, configure, and enforce consistent, repeatable environments.
• Containerize applications with Docker and manage orchestration, image hardening, and registry workflows in alignment with DHS security baselines.
• Administer RHEL systems and develop automation in Python and Linux shell to streamline operational tasks and reduce manual intervention.
• Manage secrets, credentials, and encryption keys using HashiCorp Vault and AWS IAM, enforcing least-privilege access across all environments.
• Integrate security scanning (SAST, DAST, SCA, container, and IaC scanning) into pipelines and remediate findings in partnership with development teams.
• Monitor system health, performance, and security posture using CloudWatch and related tooling; respond to incidents and lead root-cause analysis.
• Administer Oracle and PostgreSQL databases on Amazon RDS, including backup, patching, performance tuning, and access controls.
• Support Authority to Operate (ATO) activities by implementing and documenting NIST 800-53 controls, producing artifacts, and addressing POA&M items.
• Collaborate with development, security, and operations teams to mature DevSecOps practices, mentor junior engineers, and drive continuous improvement.

Requirements

• US Citizenship (ability to pass full background check and obtain and maintain a DHS 6C Public Trust clearance)
• Bachelor's degree or higher (computer science background recommended but not required with suitable experience)
• Ability to work on-site in Crystal City, Virginia, 1-2 days per month
• Five+ (5) years of Information Assurance experience
• Experience with the following technologies:
• Cloudbees/Jenkins
• Terraform
• Git and GitHub
• AWS Admin

Preferred Additional Skills and Qualifications

• Experience with the following technologies:
• Ansible Tower
• Maven
• Containerization (Docker)
• Container Orchestration (Amazon ECS/EKS, Kubernetes, or OpenShift)
• Vault
• LINUX (RHEL preferred), shell scripting
• Deployment Strategies
• Automated Deployment Testing and Tooling

Benefits

• A competitive Medical, Dental, and Vision plan
• Retirement Savings Plan
• Life Insurance
• AD&D Insurance
• Short Term and Long Term Disability Insurance
• 3 weeks of annual PTO
• 11 days of Holiday PTO
• Performance Awards
• Referral Bonus Plan (of up to $5,000/year)
• Education Reimbursement/Training (of up to $2,500/year)