DevSecOps Engineer - Government
Core
Design and implement secure CI/CD pipelines, automated security controls, and compliance evidence generation for software delivery in AWS GovCloud and classified environments.
Role type
Senior DevSecOps Engineer (Government)
Builds
Hardened CI/CD pipelines, secure build environments, and automated compliance evidence for classified/air-gapped systems.
Domain
Government Cloud (AWS GovCloud), Cybersecurity, Compliance (NIST, CMMC, DoD)
Required skills
CI/CD pipeline engineering, SAST/DAST/SCA tool integration, container security, infrastructure-as-code, policy-as-code, AWS security services, threat modeling, compliance mapping
Preferred skills
CISSP, CSSLP, CKS, AWS Security Specialty, experience with air-gapped environments, SLSA, SSDF, securing AI/ML workloads
Technologies
GitLab CI, GitHub Actions, Jenkins, Docker, Kubernetes, Terraform, Ansible, AWS CDK, CloudFormation, OPA/Rego, cfn-guard, Cedar, AWS Config, Security Hub, IAM, KMS, CloudTrail, CloudWatch/EventBridge
Responsibilities
Build and maintain secure CI/CD pipelines and hardened build environments; Integrate SAST, DAST, SCA, secrets, container, and IaC scanning tools; Define security promotion gates and exception workflows; Automate system hardening and policy enforcement; Lead threat modeling and security design reviews; Map technical controls to NIST, DISA STIG, DoD, and CMMC requirements; Provide secure development guidance and developer troubleshooting.
Seniority
Senior, hands-on IC
