AI-Powered DevSecOps Engineer for AWS CI/CD

STS Worldwide Inc.; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

STS Worldwide Inc. is seeking a DevSecOps Engineer to build and operate secure delivery pipelines on AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices and AI-assisted tooling across the SDLC.

Responsibilities include creating pipelines with CodePipeline/CodeBuild, coding infrastructure with CDK/CloudFormation, and integrating SAST/DAST/SCA with policy-as-code to meet FedRAMP/NIST requirements.

Qualifications

• 3+ years of DevOps/DevSecOps engineering experience.
• Hands-on AWS and infrastructure-as-code (CDK/CloudFormation).
• Experience with CI/CD tooling and security automation.
• Scripting experience (Python, Bash, or similar).

Responsibilities

• Build and maintain CI/CD pipelines using AWS-native tooling (CodePipeline, CodeBuild).
• Implement infrastructure-as-code with AWS CDK/CloudFormation.
• Integrate security scanning (SAST/DAST/SCA) and policy-as-code into pipelines.
• Automate compliance evidence for FedRAMP/NIST controls.
• Support environment provisioning and deployment automation (blue/green, canary).
• Embed AI-assisted tooling for scanning, testing, and pipeline authoring.

Skills

DevSecOps experience

AWS & IaC

CI/CD & security automation

Scripting (Python, Bash)

Tools

CodePipeline

CodeBuild

AWS CDK

CloudFormation

Job description

STS Worldwide Inc. is seeking a DevSecOps Engineer to build and operate secure delivery pipelines on AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices and AI-assisted tooling across the SDLC.

Responsibilities include creating pipelines with CodePipeline/CodeBuild, coding infrastructure with CDK/CloudFormation, and integrating SAST/DAST/SCA with policy-as-code to meet FedRAMP/NIST requirements.