CI/CD Pipeline Engineer / DevSecOps Engineer

Jobgether; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote work

Flexible schedule

Career growth

Team collaboration

Job summary

Jobgether seeks a CI/CD Pipeline Engineer / DevSecOps Engineer to join a mission-driven tech team in the United States. You will design, develop, and optimize automated CI/CD pipelines for enterprise applications, with a focus on security, compliance, and reliability.

You will collaborate with software, cloud, and cybersecurity teams to implement DevSecOps across the SDLC, supporting Java microservices and containerized workloads in cloud environments. U.S.

Qualifications

• Bachelor's degree in a related field and at least 10 years of total professional experience; higher experience cannot substitute for degree.
• At least three years of experience building or maintaining CI/CD pipelines and DevOps automation.
• Familiarity with Git workflows and one or more CI/CD platforms (Jenkins, Harness, GitLab CI/CD, or GitHub Actions).
• Experience with Docker, Kubernetes, container registries, and cloud deployments (AWS, EKS).
• Proficiency in Python, Bash, PowerShell, or Groovy for scripting and automation.
• Strong understanding of software delivery fundamentals, including builds, tests, versioning, and release management.
• Experience with security tooling and automated code quality scanning in CI/CD pipelines.
• Excellent troubleshooting, documentation, and cross-team communication skills.
• Familiarity with RMF/NIST SP 800-53 compliance and federal IT programs is a plus.
• U.S. citizenship and ability to obtain Public Trust clearance; fully remote within the United States.

Responsibilities

• Design, develop, configure, maintain, and optimize automated CI/CD pipelines for enterprise apps and microservices.
• Implement and improve build processes, testing, artifact publishing, and deployment workflows.
• Create reusable automation components and templates to standardize releases.
• Diagnose and resolve pipeline failures and deployment issues to minimize delays.
• Embed automated security testing (SAST, SCA, image scanning) into delivery workflows.
• Implement security gates and compliance controls aligned with NIST SP 800-53 and RMF.
• Support vulnerability remediation, logs, and audit trails for releases.
• Work with AWS/EKS and container registries; integrate pipelines with cloud services.
• Manage source control, versioning, and release tagging across environments.
• Collaborate with cross-functional teams and document best practices and standards.

Skills

CI/CD pipelines

DevSecOps

Python scripting

Git

Docker

Kubernetes

Terraform

AWS

Java

Communication

Education

Bachelor's degree

Tools

Jenkins

GitHub Actions

Harness

Twistlock/Prisma Cloud

SonarQube

New Relic

CloudWatch

Job description

CI/CD Pipeline Engineer / DevSecOps Engineer, based in the United States.

Join a mission-driven technology team focused on modernizing critical government systems and strengthening secure, reliable digital services. In this role, you will design, develop, and optimize automated CI/CD pipelines that accelerate software delivery while maintaining high standards of quality, security, and compliance. You will collaborate with software developers, cloud engineers, infrastructure specialists, and cybersecurity teams to integrate DevSecOps practices throughout the software development lifecycle. Your work will support cloud-native applications, Java microservices, containerized workloads, and enterprise platforms in environments with demanding security and availability requirements. This position offers the opportunity to improve automation, streamline releases, and contribute to systems that support important public-sector services. The role is fully remote within the United States, requires U.S. citizenship and a Public Trust clearance at the start, and does not involve travel.

Accountabilities

• CI/CD Pipeline Engineering: Design, develop, configure, maintain, and optimize automated CI/CD pipelines for enterprise applications, microservices, software builds, automated testing, and infrastructure workflows.
• Build and Release Automation: Implement and improve build processes, unit and integration testing, code quality analysis, artifact publishing, and deployment workflows to increase release efficiency and reliability.
• Reusable Automation Components: Develop reusable pipeline templates, shared libraries, deployment scripts, and automation tools that standardize software delivery across projects.
• Pipeline Troubleshooting: Diagnose and resolve pipeline failures, build errors, deployment issues, and configuration inconsistencies to minimize development delays and operational risks.
• DevSecOps Integration: Embed automated security testing into delivery workflows, including static application security testing (SAST), software composition analysis (SCA), container image scanning, and vulnerability assessments.
• Security and Compliance Controls: Implement security gates, quality thresholds, and approval requirements while aligning pipeline configurations with applicable NIST SP 800-53, Risk Management Framework (RMF), and federal cybersecurity requirements.
• Vulnerability Remediation and Audit Readiness: Support the resolution of security findings and maintain pipeline logs, deployment records, release approvals, and traceability documentation.
• Cloud and Container Deployment: Support containerized applications using Docker and Kubernetes, including Amazon Elastic Kubernetes Service (EKS), and integrate pipelines with cloud services, container registries, and infrastructure automation.
• Deployment Strategy and Reliability: Implement appropriate deployment approaches, including rolling deployments, blue-green releases, and rollback procedures, while collaborating with infrastructure teams to resolve environment, networking, access, and configuration issues.
• Configuration and Version Management: Maintain source control workflows, branching strategies, versioning, artifact repositories, release tagging, and controlled promotion across development, test, staging, and production environments.
• Monitoring and Continuous Improvement: Monitor pipeline performance, identify opportunities to reduce deployment time and manual intervention, and improve automation, reliability, consistency, and release quality.
• Cross-Functional Collaboration: Work closely with development, cybersecurity, quality assurance, architecture, infrastructure, and operations teams to resolve technical and compliance challenges and meet program milestones.
• Technical Guidance and Documentation: Advise developers on pipeline usage and DevSecOps best practices while maintaining technical standards, operational procedures, troubleshooting guides, and comprehensive documentation.

Requirements

• Education and Overall Experience: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, together with at least 10 years of total professional experience in the field. The source specifies that additional experience cannot substitute for the degree requirement; equivalent relevant professional experience is also referenced in the qualification criteria.
• CI/CD and DevOps Experience: At least three years of experience developing, maintaining, or supporting CI/CD pipelines and DevOps automation.
• CI/CD Platforms: Demonstrated experience with one or more platforms such as Jenkins, Harness, GitLab CI/CD, or GitHub Actions.
• Source Control: Practical experience with Git and established source control workflows.
• Scripting and Automation: Proficiency in Python, Bash, PowerShell, or Groovy for scripting, pipeline automation, and deployment support.
• Containers and Deployment: Experience with Docker, Kubernetes, container registries, and automated application deployment processes.
• Software Delivery Fundamentals: Strong understanding of software builds, automated testing, version control, release management, and configuration management.
• Security and Code Quality: Experience integrating code quality tools and automated security scanning into software delivery workflows, including vulnerability identification and remediation.
• Troubleshooting and Communication: Strong analytical, problem-solving, documentation, and communication skills, with the ability to work effectively across technical teams.
• Cloud and Infrastructure Automation: Experience with AWS services and Amazon EKS is preferred, as is familiarity with infrastructure-as-code tools such as Terraform or CloudFormation.
• Pipeline Orchestration: Experience with Harness pipeline development, reusable templates, service and environment configuration, and deployment orchestration is an advantage.
• Security and Monitoring Tools: Familiarity with SonarQube, Twistlock/Prisma Cloud, or comparable security and code quality tools, as well as observability platforms such as New Relic or CloudWatch, is preferred.
• Application Architecture: Experience supporting Java applications, REST APIs, and microservice architectures is beneficial.
• Federal IT and Compliance: Experience supporting federal government IT programs and working with NIST SP 800-53, FISMA, or the Risk Management Framework (RMF) is preferred.
• Production Operations: Experience supporting production systems with stringent availability, auditability, security, and change-control requirements is an advantage.
• Work Authorization and Clearance: U.S. citizenship is required, and candidates must be able to obtain or hold the required Public Trust clearance at the start of the assignment.
• Work Arrangement: This is a fully remote position within the United States, with no travel required.
• Certifications: No specific certification is required for this position.

Benefits

• Remote Flexibility: Fully remote work arrangement.
• Mission-Driven Work: Opportunity to contribute to the modernization and security of critical government systems and digital services.
• Professional Collaboration: Work alongside multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.
• Technical Growth: Opportunities to deepen expertise in CI/CD automation, DevSecOps practices, cloud-native applications, container orchestration, and security-focused software delivery.