CI/CD Pipeline Engineer / DevSecOps Engineer

Jobgether; Oregon; Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Remote flexibility

Mission-driven work

Collaboration across teams

Technical growth opportunities

Job summary

Jobgether is seeking a seasoned DevOps/CI‑CD Engineer to lead automation across enterprise applications and microservices. You will build and optimize pipelines, integrate security testing, and drive reliability and compliance in cloud deployments using Docker, Kubernetes, and AWS services.

The role requires extensive experience with CI/CD tooling, scripting, and infrastructure-as-code, along with strong collaboration across development, security, and operations teams.

Qualifications

• Bachelor's degree required; 10+ years total experience in IT fields.
• 3+ years in CI/CD pipelines and DevOps automation.
• Experience with Jenkins, Harness, GitLab CI/CD, or GitHub Actions.
• Practical Git and established source control workflows.
• Proficiency in Python, Bash, PowerShell, or Groovy for scripting.
• Experience with Docker, Kubernetes, registries, and automated deployments.
• Strong understanding of software builds, automated testing, release mgmt, and config mgmt.
• Experience integrating code quality tools and automated security scanning.
• Excellent troubleshooting, documentation, and cross-team communication.
• Familiarity with AWS, EKS, and IaC tools (Terraform/CloudFormation).
• Experience with Harness templates, service/env config, and deployment orchestration is a plus.
• Knowledge of SonarQube, Twistlock/Prisma Cloud, and observability (New Relic, CloudWatch).
• Experience supporting Java apps, REST APIs, microservices; RMF/NIST/ RMF familiarity is a plus.
• Operations experience in production environments with strict controls.
• U.S. citizenship and ability to obtain Public Trust clearance.

Responsibilities

• Design, build, configure, maintain, and optimize CI/CD pipelines.
• Improve build, test, and deployment workflows for reliability.
• Create reusable automation templates and libraries.
• Diagnose and fix pipeline failures and deployment issues.
• Embed security testing (SAST, SCA) into delivery workflows.
• Enforce security gates and compliance controls per RMF/NIST.
• Maintain logs, approvals, and traceability for releases.
• Support containerized apps using Docker/Kubernetes (EKS).
• Implement deployment strategies: rolling, blue-green, rollback.
• Manage source control, versioning, and release tagging across environments.
• Monitor pipeline performance and drive continuous improvement.
• Collaborate across development, security, quality, and operations teams.
• Provide guidance and documentation on pipeline usage and best practices.

Skills

CI/CD & DevOps

Scripting (Python/Bash/PowerShell/Groo

Containerization (Docker/Kubernetes)

Git & workflows

Cloud (AWS, EKS)

IaC (Terraform/CloudFormation)

Security & code quality

Monitoring (New Relic/CloudWatch)

Java REST microservices

Federal IT & RMF/NIST

Deployment automation

Troubleshooting & communication

Education

Bachelor's degree in CS/IT/Engineering or related field

Tools

Jenkins

Harness

GitLab CI/CD

GitHub Actions

Git

Docker

Kubernetes

Terraform

CloudFormation

Job description

Accountabilities

• CI/CD Pipeline Engineering: Design, develop, configure, maintain, and optimize automated CI/CD pipelines for enterprise applications, microservices, software builds, automated testing, and infrastructure workflows.
• Build and Release Automation: Implement and improve build processes, unit and integration testing, code quality analysis, artifact publishing, and deployment workflows to increase release efficiency and reliability.
• Reusable Automation Components: Develop reusable pipeline templates, shared libraries, deployment scripts, and automation tools that standardize software delivery across projects.
• Pipeline Troubleshooting: Diagnose and resolve pipeline failures, build errors, deployment issues, and configuration inconsistencies to minimize development delays and operational risks.
• DevSecOps Integration: Embed automated security testing into delivery workflows, including static application security testing (SAST), software composition analysis (SCA), container image scanning, and vulnerability assessments.
• Security and Compliance Controls: Implement security gates, quality thresholds, and approval requirements while aligning pipeline configurations with applicable NIST SP 800-53, Risk Management Framework (RMF), and federal cybersecurity requirements.
• Vulnerability Remediation and Audit Readiness: Support the resolution of security findings and maintain pipeline logs, deployment records, release approvals, and traceability documentation.
• Cloud and Container Deployment: Support containerized applications using Docker and Kubernetes, including Amazon Elastic Kubernetes Service (EKS), and integrate pipelines with cloud services, container registries, and infrastructure automation.
• Deployment Strategy and Reliability: Implement appropriate deployment approaches, including rolling deployments, blue-green releases, and rollback procedures, while collaborating with infrastructure teams to resolve environment, networking, access, and configuration issues.
• Configuration and Version Management: Maintain source control workflows, branching strategies, versioning, artifact repositories, release tagging, and controlled promotion across development, test, staging, and production environments.
• Monitoring and Continuous Improvement: Monitor pipeline performance, identify opportunities to reduce deployment time and manual intervention, and improve automation, reliability, consistency, and release quality.
• Cross-Functional Collaboration: Work closely with development, cybersecurity, quality assurance, architecture, infrastructure, and operations teams to resolve technical and compliance challenges and meet program milestones.
• Technical Guidance and Documentation: Advise developers on pipeline usage and DevSecOps best practices while maintaining technical standards, operational procedures, troubleshooting guides, and comprehensive documentation.

Requirements

• Education and Overall Experience: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, together with at least 10 years of total professional experience in the field. The source specifies that additional experience cannot substitute for the degree requirement; equivalent relevant professional experience is also referenced in the qualification criteria.
• CI/CD and DevOps Experience: At least three years of experience developing, maintaining, or supporting CI/CD pipelines and DevOps automation.
• CI/CD Platforms: Demonstrated experience with one or more platforms such as Jenkins, Harness, GitLab CI/CD, or GitHub Actions.
• Source Control: Practical experience with Git and established source control workflows.
• Scripting and Automation: Proficiency in Python, Bash, PowerShell, or Groovy for scripting, pipeline automation, and deployment support.
• Containers and Deployment: Experience with Docker, Kubernetes, container registries, and automated application deployment processes.
• Software Delivery Fundamentals: Strong understanding of software builds, automated testing, version control, release management, and configuration management.
• Security and Code Quality: Experience integrating code quality tools and automated security scanning into software delivery workflows, including vulnerability identification and remediation.
• Troubleshooting and Communication: Strong analytical, problem-solving, documentation, and communication skills, with the ability to work effectively across technical teams.
• Cloud and Infrastructure Automation: Experience with AWS services and Amazon EKS is preferred, as is familiarity with infrastructure-as-code tools such as Terraform or CloudFormation.
• Pipeline Orchestration: Experience with Harness pipeline development, reusable templates, service and environment configuration, and deployment orchestration is an advantage.
• Security and Monitoring Tools: Familiarity with SonarQube, Twistlock/Prisma Cloud, or comparable security and code quality tools, as well as observability platforms such as New Relic or CloudWatch, is preferred.
• Application Architecture: Experience supporting Java applications, REST APIs, and microservice architectures is beneficial.
• Federal IT and Compliance: Experience supporting federal government IT programs and working with NIST SP 800-53, FISMA, or the Risk Management Framework (RMF) is preferred.
• Production Operations: Experience supporting production systems with stringent availability, auditability, security, and change-control requirements is an advantage.
• Work Authorization and Clearance: U.S. citizenship is required, and candidates must be able to obtain or hold the required Public Trust clearance at the start of the assignment.
• Work Arrangement: This is a fully remote position within the United States, with no travel required.
• Certifications: No specific certification is required for this position.

Benefits

• Remote Flexibility: Fully remote work arrangement.
• Mission-Driven Work: Opportunity to contribute to the modernization and security of critical government systems and digital services.
• Professional Collaboration: Work alongside multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
• Technical Growth: Opportunities to deepen expertise in CI/CD automation, DevSecOps practices, cloud-native applications, container orchestration, and security-focused software delivery.