Dev/Sec Ops Engineer

All Native Group, The Federal Services Division of Ho-Chunk Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Job summary

All Native Group, the Federal Services division of Ho-Chunk Inc., seeks a Mid-Level DevSecOps Engineer to augment the Congressional Budget Office’s engineering team and mature its hybrid-cloud infrastructure, CI/CD pipelines, and security-hardened delivery practices.

You will inherit established patterns and contribute to Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, and policy-as-code to enforce CIS/NIST baselines, support audits, and collaborate across teams.

Qualifications

• Minimum of 5 years of DevSecOps or infrastructure automation experience.
• Hands-on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning.
• Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and OPA/Rego.
• Federal or highly regulated environment experience preferred.

Responsibilities

• Maintain, extend, and refactor Terraform/OpenTofu codebases with remote state management.
• Develop and maintain Ansible playbooks and roles for configuration and deployment.
• Build and improve GitHub Actions workflows with security gates and policy-as-code validation.
• Support container delivery using Docker and Kubernetes, with image hardening and scans.
• Enforce CIS baselines and NIST compliance throughout delivery lifecycle.
• Work within change management and peer review workflows; no production changes without approval.
• Produce and maintain documentation, runbooks, and compliance artifacts.
• Participate in stand-ups, sprint planning, and knowledge transfer.

Skills

Infrastructure-as-Code

CI/CD pipeline engineering

Container hardening

Policy-as-code

Collaboration

Education

Bachelor’s degree in CS/IT or related field

Tools

Terraform/OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes/Helm

Security scanning tools (Trivy/Grype)

Job description

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Mid‑Level DevSecOps Engineer to augment the Congressional Budget Office’s (CBO) engineering team and mature its infrastructure automation, CI/CD pipeline, container orchestration, and security‑hardened delivery practices.

The engineer inherits established patterns and incrementally enhances capabilities within an active production, hybrid‑cloud environment.

Essential Functions

• Maintain, extend, and refactor Terraform and OpenTofu codebases, including modular configurations, remote state, and backend management within approved change control.
• Develop and maintain Ansible playbooks and roles for configuration, compliance enforcement, patch management, and application deployment.
• Build and improve GitHub Actions workflows with security gates including SAST, dependency scanning, secrets detection, and policy‑as‑code validation.
• Support containerized delivery using Docker and Kubernetes, authoring hardened images, manifests, and Helm charts, with vulnerability scanning prior to deployment.
• Integrate Shift‑Left security throughout the delivery lifecycle, enforcing CIS benchmarks and CBO baselines and supporting NIST SP 800‑53 and FISMA compliance.
• Work within CBO’s version control, change management, and peer review workflows; push no changes to production without following the change advisory process.
• Produce and maintain documentation, runbooks, and compliance artifacts to support audits and assessments.
• Participate in stand‑ups, sprint planning, and technical reviews, and conduct knowledge transfer with CBO engineering staff.

Competencies

• Strong Infrastructure‑as‑Code and Configuration‑as‑Code skills.
• CI/CD pipeline engineering with integrated security gates.
• Container hardening and orchestration proficiency.
• Familiarity with policy‑as‑code and secrets management.
• Collaborative, standards‑driven engineering approach.

Supervisory Responsibility

This position involves executive oversight of multiple program portfolios and senior management teams.

Work Environment

This job operates in executive settings with frequent engagement at the highest levels of Navy leadership. This role uses executive office equipment and classified communication systems.

Physical Demands

The physical demands are typical of executive positions, with extensive travel and high‑stress decision‑making requirements. While performing the duties of this job, the employee is regularly required to talk or hear.

Position Type / Expected Hours of Work

This is a full‑time executive position with flexible hours based on mission requirements.

Travel

Travel is primarily local during the business day. Work is performed in a hybrid environment; on‑site support is performed at CBO facilities in Washington, DC, with occasional support at the Ashburn, VA and Manassas, VA data center locations.

Experience

• Minimum of 5 years of DevSecOps or infrastructure automation experience.
• Hands‑on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning (Trivy, Grype, or equivalent).
• Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect‑Secrets), and OPA/Rego.
• Federal or highly regulated environment experience preferred.

Education

Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.

Additional Eligibility Qualifications

No specific certification is required. Certified Kubernetes Administrator (CKA) or HashiCorp Terraform Associate is preferred.

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre‑employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Must be a U.S. citizen or permanent resident. Position requires a Public Trust Tier 2 clearance, obtained through a U.S. Capitol Police background check, prior to accessing the CBO network.

AAP/EEO Statement

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.