DevSecOps Engineer

Ascension Fed; Colorado Springs (CO); On-site; USD 120,000 - 170,000; Full time

Job summary

Ascension Fed is seeking a skilled DevSecOps Engineer to join our team in Colorado Springs, CO. You will integrate security into DevOps, ensure secure software delivery, and maintain reliable systems.

The role requires 5+ years in DevSecOps, strong cloud and CI/CD tooling experience, and proficiency in scripting. You will work with Terraform/CloudFormation and Kubernetes, contributing to threat modeling and incident response.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field, or equivalent experience.
• 5+ years of experience in DevSecOps, DevOps, or related roles.
• Strong knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with CI/CD tools like Jenkins, GitLab CI, CircleCI, or similar.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Hands-on experience with containerization and orchestration technologies (Docker, Kubernetes).
• Familiarity with security frameworks and compliance standards (e.g., NIST, CIS, ISO 27001).
• Experience with vulnerability management tools and SAST/DAST.
• Strong problem-solving skills and ability to work collaboratively in a team environment.
• Excellent communication skills, both written and verbal.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines to automate software delivery and infrastructure changes.
• Collaborate with development, operations, and security teams to embed security best practices throughout the SDLC.
• Conduct security assessments, vulnerability scanning, and threat modeling to identify and mitigate risks.
• Manage and monitor cloud infrastructure security, including configuration, access controls, and compliance.
• Develop and maintain infrastructure as code (IaC) using Terraform, CloudFormation, or similar.
• Implement and manage container security and orchestration platforms like Kubernetes and Docker.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Respond to security incidents and support root cause analysis and remediation efforts.
• Stay current with emerging security threats, vulnerabilities, and industry best practices.

Skills

DevSecOps

CI/CD

Cloud platforms

CI/CD tools

Scripting

Docker/Kubernetes

Security frameworks

Vulnerability management

Team collaboration

Communication

Education

Bachelor's degree or equivalent

Tools

Terraform

CloudFormation

Job description

Clearance: Secret, TS, TS/SCI, TS/SCI with Full or CI Polys

About the Role

We are seeking a skilled and motivated DevSecOps Engineer to join our team in Colorado Springs, CO. In this role, you will be responsible for integrating security practices within the DevOps process, ensuring the development, deployment, and maintenance of secure and reliable software systems.

Key Responsibilities

• Design, implement, and maintain secure CI/CD pipelines to automate software delivery and infrastructure changes.
• Collaborate with development, operations, and security teams to embed security best practices throughout the software development lifecycle.
• Conduct security assessments, vulnerability scanning, and threat modeling to identify and mitigate risks.
• Manage and monitor cloud infrastructure security, including configuration, access controls, and compliance.
• Develop and maintain infrastructure as code (IaC) using tools such as Terraform, CloudFormation, or similar.
• Implement and manage container security and orchestration platforms like Kubernetes and Docker.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Respond to security incidents and support root cause analysis and remediation efforts.
• Stay current with emerging security threats, vulnerabilities, and industry best practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience.
• 5+ years of experience in DevSecOps, DevOps, or related roles.
• Strong knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with CI/CD tools like Jenkins, GitLab CI, CircleCI, or similar.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Hands-on experience with containerization and orchestration technologies (Docker, Kubernetes).
• Familiarity with security frameworks and compliance standards (e.g., NIST, CIS, ISO 27001).
• Experience with vulnerability management tools and static/dynamic application security testing (SAST/DAST).
• Strong problem-solving skills and ability to work collaboratively in a team environment.
• Excellent communication skills, both written and verbal.