DevSecOps Engineer

Node.Digital; Herndon (VA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Basic Life

Health Saving Account

401K Matching

Three weeks of PTO/Sick

11 Paid Holidays

Pre-Approved Online Training

Job summary

Node.Digital is seeking a DevSecOps Engineer in Herndon, VA, offering hybrid work. The role focuses on architecting DevSecOps, test automation, and security automation within the software delivery lifecycle. You will build comprehensive CI/CD pipelines across dev-to-prod, integrating security controls and governance metrics.

The position requires 3+ years of experience and U.S. citizenship for the federal project; collaboration with security, privacy, and compliance teams is essential.

Qualifications

• Bachelor's degree or equivalent experience in CS/InfoSec/Engineering.
• Experience with AWS high-volume, cloud-native security.
• Hands-on DevOps/DevSecOps or security engineering roles.
• CI/CD pipelines with Jenkins or Harness.
• IaC and containerization (Kubernetes, Docker).
• Security tooling integrated into pipelines (SAST, DAST, SCA).
• CMDB/asset tools like ServiceNow; monitoring with Splunk/Prometheus/Grafana.
• Strong cross-team communication.

Responsibilities

• Design, build, and maintain end-to-end CI/CD pipelines.
• Deploy applications on AWS with container/serverless/VM workloads.
• Define and maintain pipeline standards and infrastructure-as-code patterns.
• Continuously refine pipelines for speed, reliability, and efficiency.
• Establish automated testing within pipelines (unit, integration, functional, regression, performance).
• Integrate automated security controls (SAST, DAST, SCA, secrets detection, container/image scanning, IaC scanning).
• Ensure pipelines and solutions comply with security, credentialing, and privacy policies.
• Partner with security, privacy, and compliance stakeholders to automate controls.
• Build dashboards and metrics for leadership and governance.

Skills

DevSecOps

CI/CD pipelines

AWS security

Containerization

Kubernetes

Education

Bachelor's degree or equivalent experience

Tools

Jenkins

Harness

Kubernetes

Docker

ServiceNow

Splunk

Prometheus

Grafana

OWASP

SonarQube

Checkmarx

Terraform

Job description

DevSecOps Engineer

Location: Herndon, VA (Hybrid Work)

This position supports a U.S. Federal Government project. U.S. citizenship is required to meet the project’s eligibility and security clearance requirements.

Experience: 3+yrs & 8 yrs

The DevSecOps Engineer is the architect and guardian of DevSecOps, Test Automation, and Security Automation. This role ensures the operational efficiency and continuous improvement of these solutions, embedding security and quality into every stage of the software delivery lifecycle. The engineer builds comprehensive CI/CD pipelines that carry code from source to production while ensuring compliance with applicable security, credentialing, and privacy policies, and integrates those pipelines with CMDB, reporting, and monitoring systems to support configuration management, asset management, governance, and performance and compliance tracking.

Key Responsibilities

DevSecOps Architecture and Pipeline Engineering

• Design, build, and maintain end-to-end CI/CD pipelines that move code from source control to production in a reliable and repeatable way.
• Build, package, and deploy applications on AWS (container, serverless, and VM-based workloads) through automated pipelines, with controlled promotion across dev, test, staging, and production, blue/green or canary releases, and automated rollback.
• Define and maintain pipeline standards, templates, and infrastructure-as-code patterns for reuse across teams.
• Continuously refine pipelines to improve speed, reliability, and efficiency.

• Establish and maintain comprehensive automated testing within pipelines, including unit, integration, functional, regression, and performance tests.

• Integrate automated security controls into pipelines, such as SAST, DAST, SCA, secrets detection, container and image scanning, and IaC scanning.

• Ensure all pipelines and deployed solutions comply with applicable security, credentialing, and privacy policies.
• Partner with security, privacy, and compliance stakeholders to translate policy requirements into automated controls.

• Build dashboards and metrics (e.g., deployment frequency, lead time, change failure rate, mean time to remediate vulnerabilities) for leadership and governance bodies.

• Coach development and operations teams on secure coding, pipeline use, and automation best practices.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.
• Experience operating high volume and large scale applications with cloud-native security in AWS
• Hands on experience in DevOps, DevSecOps, or security engineering roles.
• Hands-on experience building and managing CI/CD pipelines (Jenkins, Harness)
• Experience with infrastructure as code and containerization/orchestration (Kubernetes, Docker)
• Experience integrating security tooling into pipelines (Sonarqube, OWASP, Checkmarx etc)
• Experience with CMDB and asset management tools (e.g., ServiceNow) and with monitoring and observability platforms (e.g., Splunk, Prometheus, Grafana).
• Strong communication skills and the ability to work across technical and non-technical stakeholders.

Preferred Qualifications

• Familiarity with security and privacy frameworks and regulations (e.g., NIST 800-53, FedRAMP, FISMA, Privacy Act).
• Experience with policy-as-code (e.g., OPA) and software supply chain security (SBOMs, artifact signing).

• Medical
• Dental
• Vision
• Basic Life
• Health Saving Account
• 401K Matching
• Three weeks of PTO/Sick
• 11 Paid Holidays
• Pre-Approved Online Training