DevSecOps Engineer

Socket.dev; Bethesda (MD); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health benefits

Dental insurance

Vision insurance

401(k)

Paid time off

Professional development

Job summary

Avyanna LLC is seeking an experienced DevSecOps Engineer to design, implement, and manage secure CI/CD pipelines in support of a large-scale federal IT program. The role focuses on integrating security throughout the SDLC within a hybrid cloud environment and guiding a team of engineers delivering continuous compliance.

The successful candidate will lead automated pipelines with security gates, implement IaC with Terraform and Ansible, and coordinate with cybersecurity and system engineering

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 8+ years of experience in DevOps or DevSecOps roles, with at least 2 years in a lead capacity.
• Hands-on experience with Jenkins, GitLab CI/CD or GitHub Actions in a federal or regulated environment.
• Proficiency with container technologies: Docker, Kubernetes, OpenShift.
• Experience with AWS GovCloud or Azure Government; familiarity with FedRAMP authorized services.
• Strong understanding of NIST SP 800-53, RMF, and FISMA compliance requirements.

Responsibilities

• Lead the design and implementation of automated CI/CD pipelines incorporating security gates at every stage of the development lifecycle.
• Integrate SAST, DAST, SCA, and container scanning tools into pipeline workflows.
• Manage and harden containerized workloads using Docker and Kubernetes/OpenShift in GovCloud environments.
• Implement Infrastructure as Code (IaC) using Terraform and Ansible; enforce policy-as-code via OPA or similar frameworks.
• Coordinate with cybersecurity and system engineering teams to support ATO activities, continuous monitoring, and FISMA compliance.
• Establish DevSecOps metrics and dashboards; present pipeline health, vulnerability trends, and remediation status to stakeholders.
• Mentor junior engineers; serve as technical authority for DevSecOps toolchain selection and roadmap.

Skills

Leadership

Security best practices

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Jenkins

GitLab CI/CD

GitHub Actions

Docker

Kubernetes

OpenShift

Terraform

Ansible

OPA

Job description

POSITION SUMMARY

We are seeking an experienced DevSecOps Engineer to design, implement, and manage secure CI/CD pipelines and DevSecOps practices in support of a large-scale federal IT program. The successful candidate will integrate security throughout the software development lifecycle and lead a team of DevSecOps engineers delivering continuous compliance in a hybrid cloud environment.

KEY RESPONSIBILITIES

• Lead the design and implementation of automated CI/CD pipelines incorporating security gates at every stage of the development lifecycle


• Integrate SAST, DAST, SCA, and container scanning tools into pipeline workflows


• Manage and harden containerized workloads using Docker and Kubernetes/OpenShift in GovCloud environments


• Implement Infrastructure as Code (IaC) using Terraform and Ansible; enforce policy-as-code via OPA or similar frameworks


• Coordinate with cybersecurity and system engineering teams to support ATO activities, continuous monitoring, and FISMA compliance


• Establish DevSecOps metrics and dashboards; present pipeline health, vulnerability trends, and remediation status to stakeholders


• Mentor junior engineers; serve as technical authority for DevSecOps toolchain selection and roadmap

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, or related field


• 8+ years of experience in DevOps or DevSecOps roles, with at least 2 years in a lead capacity


• Hands-on experience with Jenkins,GitLab CI/CD or GitHub Actions in a federal or regulated environment


• Proficiency with container technologies: Docker, Kubernetes, OpenShift


• Experience with AWS GovCloud or Azure Government; familiarity with FedRAMP authorized services


• Strong understanding of NIST SP 800-53, RMF, and FISMA compliance requirements

Clearance: Must be eligible to obtain and maintain a federal Public Trust background investigation (MBI or HBI). U.S. citizenship or permanent residency required.

PREFERRED QUALIFICATIONS

• Certified Kubernetes Administrator (CKA) or equivalent


• AWS Certified DevOps Engineer or Azure DevOps Engineer certification


• Experience supporting NIH, HHS, or other federal civilian research IT environments


• Familiarity with DISA STIGs and CIS Benchmarks for hardening

BENEFITS

Avyanna LLC offers a competitive salary and comprehensive benefits package including health, dental, vision, 401(k), paid time off, and professional development support.

Avyanna LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.