DevSecOps - CI/CD - IaC Engineer - General Dynamics Information Technology

OpenTalent; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

GDIT is seeking a DevSecOps CI/CD IaC Engineer to join the CMM Data Modernization and Governance team supporting the AO's cloud modernization for 204+ federal courts.

The role focuses on automating deployment, security, and governance across cloud data environments, with emphasis on secure design, monitoring, and rapid delivery.

Qualifications

• Experience delivering cloud-based DevSecOps solutions.
• Experience automating CI/CD and IaC pipelines.
• Security is integrated across software and infra lifecycles.

Responsibilities

• Deliver DevSecOps platform services embedding security, compliance, and monitoring across cloud lifecycles.
• Integrate automated security controls and continuous monitoring into CI/CD and IaC workflows.
• Build and optimize CI/CD pipelines for automated builds, tests, security scans, and deployment.
• Ensure code and IaC are version-controlled, peer-reviewed, and gated by change control.
• Automate cloud provisioning and configuration using IaC tools (Terraform, CloudFormation, ARM/Bicep).
• Implement SAST/DAST and container scanning within pipelines with rollback procedures.
• Define and enforce cloud security architecture, IAM, secrets management, and network controls.
• Conduct security reviews, threat modeling, and vulnerability assessments for pipelines and infra.

Skills

Cloud DevOps

DevOps

DevSecOps

Tools

Terraform

CloudFormation

ARM/Bicep

Job description

Cyber and IT Risk Management

Remote, Working from the USA

Key Skills For Success

Cloud DevOps

DevOps

DevSecOps

Own your opportunity to support the missions that matter. From working with technologies like AI, cyber and cloud to careers in intelligence and health, we offer endless opportunities to apply your expertise to create a safer, smarter world while building new skills to propel your career forward.

Job Description

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The DevSecOps - CI/CD - IaC Engineer will work as part of the CMM Data Modernization and Governance team responsible for delivering an integrated data governance, engineering, data platform, reporting, analytics, and Artificial Intelligence (AI)/Machine Learning (ML) capabilities that support operational decision-making and fulfill AO's data and analytics objectives in support of the CMM program.

The successful candidate will be responsible for automating software delivery, deployment pipelines, infrastructure provisioning, configuration, security controls, and operational processes across CMM cloud data environments. The role integrates security throughout the software and infrastructure lifecycle and serves as a Senior Cloud Security Specialist, ensuring cloud platforms and data environments are securely designed, deployed, monitored, and operated.

THE DEVSECOPS - CI/CD - IaC ENGINEER WILL EXECUTE THE FOLLOWING RESPONSIBILITIES

• Deliver DevSecOps platform services that embed security, compliance, and monitoring across the full cloud and data product lifecycle.
• Integrate automated security controls, vulnerability management, policy compliance, and continuous monitoring into CI/CD and IaC workflows.
• Build, maintain, optimize CI/CD pipelines for automated build, test, security scanning, & deployment.
• Ensure all code and IaC changes are version‑controlled, peer‑reviewed, security‑scanned, and governed by change‑control gates.
• Automate cloud infrastructure provisioning and configuration using IaC tools (Terraform, CloudFormation, ARM/Bicep).
• Implement SAST/DAST, dependency, and container scanning within pipelines; maintain rollback procedures and deployment monitoring.
• Define and enforce cloud security architecture, IAM policies, secrets management, encryption, and network security controls.
• Conduct security reviews, threat modeling, and vulnerability assessments for pipelines and cloud infrastructure.