Senior DevSecOps Engineer

About the role

The Senior DevSecOps Engineer builds and operates the secure delivery pipelines for the platform on AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices and AI-assisted tooling across the SDLC.

Responsibilities

• Build and maintain CI/CD pipelines using AWS-native tooling (CodePipeline, CodeBuild)
• Implement infrastructure-as-code with AWS CDK/CloudFormation
• Integrate security scanning (SAST/DAST/SCA) and policy-as-code into pipelines
• Automate compliance evidence for FedRAMP/NIST controls
• Support environment provisioning and deployment automation (blue/green, canary)
• Embed AI-assisted tooling for scanning, testing, and pipeline authoring
• Monitor pipeline health and improve delivery metrics

Requirements

• Must be a U.S. Citizen
• Must be willing to work a hybrid schedule (2 days) in Reston, VA & client locations in the Washington D.C. area as required
• Ability to pass a 7-year background check and obtain/maintain a U.S. Government Clearance
• Strong communication and presentation skills
• Must be able to prioritize and self-start
• Must be adaptable/flexible as priorities shift
• Must be enthusiastic and have passion for learning and constant improvement
• Must be open to collaboration, feedback, and client asks
• Must enjoy working with a vibrant team of outgoing personalities

Qualifications

Required

• 7+ years of DevOps/DevSecOps engineering experience
• Hands-on AWS and infrastructure-as-code (CDK/CloudFormation)
• Experience with CI/CD tooling and security automation
• Scripting experience (Python, Bash, or similar)

Preferred

• AWS certification (DevOps or Security)
• FedRAMP/NIST experience
• Familiarity with AI-assisted DevSecOps tooling

Schedule

Hybrid schedule (2 days in-office in Reston, VA and client locations in the Washington D.C. area as required).