DevSecOps Engineer

ICF; Huntsville (AL); Remote; USD 81,000 - 202,000; Full time

Job summary

A leading technology services provider is seeking a skilled DevSecOps Engineer to support secure and automated software delivery for a federal government program. This remote role requires a strong background in software development, automation, and security integration, with responsibilities including configuration of cloud infrastructure and implementation of best security practices across the CI/CD lifecycle.

Qualifications

• Bachelor's degree required.
• 2+ years of experience in AWS and Terraform.
• 1+ year experience with Kubernetes.

Responsibilities

• Maintain cloud infrastructure resources in AWS and Azure.
• Implement end-to-end automation for infrastructure provisioning.
• Embed security controls in CI/CD pipelines.

Skills

Automation

Security Integration

Infrastructure-as-Code

Critical Thinking

Problem Solving

Analytical Skills

Education

Bachelor’s Degree in Computer Science, Information Systems, or related

Tools

Terraform

Ansible

Kubernetes

Job description

Please note: This role is contingent upon contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award.

The Work We are seeking a skilled and security-focused DevSecOps Engineer to support secure, automated software delivery pipelines for a federal government program. The ideal candidate will have a strong background in software development, automation, security integration, and infrastructure-as-code practices to ensure secure, scalable, and resilient cloud-native systems.

Job Location: Remote

What You Will Do:

Configure and maintain cloud infrastructure resources within AWS GovCloud and Azure, supporting containerized and serverless architectures in a multi-environment deployment pipeline.

Design and implement end-to-end automation for infrastructure provisioning, monitoring, and deployment using Terraform, Ansible, and other approved DevSecOps tools.

Develop and maintain custom automation scripts and CI/CD workflows that reduce manual intervention and ensure consistent, secure deployments.

Deploy and manage workloads on Amazon ECS, EKS, Lambda, and API Gateway, as well as Azure equivalents, using container orchestration platforms like Red Hat OpenShift and Kubernetes.

Implement security best practices across the CI/CD lifecycle, including secure secrets management, RBAC, and Zero Trust Architecture enforcement.

Develop, support, and refine automated test, integration, and release pipelines, ensuring quality, traceability, and compliance with the Client’s modernization goals.

Build delivery environments that meet DevSecOps standards for redundancy, resilience, and scalability, following Agile and Enterprise Performance Lifecycle (EPLC) methodologies.

Integrate security tooling (e.g., SAST, DAST, vulnerability scanners, container hardening tools) into CI/CD pipelines via APIs and plug-ins to ensure security controls are embedded from development through deployment.

Support compliance with federal cybersecurity requirements including NIST SP 800-53, NIST SP 800-137, FISMA, and FedRAMP.

Implement and maintain controls for certificate management, encryption, key management, and system logging/monitoring, in coordination with the Client’s cybersecurity teams.

What You Will Bring With You:

Bachelor’s Degree in Computer Science, Information Systems, Engineering or other related scientific or technical discipline

2 or more years of experience using AWS resources

2 or more years of experience working with Terraform and Ansible

1 or more years of experience working with automation tools such as Kubernetes

US Citizenship or Green Card required due to federal contract requirements

Must be able to obtain Public Trust clearance.

MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.)

What We Would Like You To Bring With You:

Proficiency with CI/CD tools like GitLab CI, Jenkins, GitHub Actions, or CircleCI.

Experience with container orchestration (e.g., Kubernetes, ECS, AKS).

Experience supporting agile teams and using tools like Jira and Confluence.

Familiarity with federal security standards such as FedRAMP, FISMA, and NIST SP 800-53.

Familiarity with Zero Trust architecture and secure software development frameworks.

Professional Skills:

Strong critical thinking, problem solving and analytical skills

Strong oral and written communication skills

Ability to work independently and collaboratively

Flexible and willing to accept a change in priorities as necessary

Demonstrated time management skills

Strong organizational skills with attention to detail

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

Please note: This role is contingent upon contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award.

The Work We are seeking a skilled and security-focused DevSecOps Engineer to support secure, automated software delivery pipelines for a federal government program. The ideal candidate will have a strong background in software development, automation, security integration, and infrastructure-as-code practices to ensure secure, scalable, and resilient cloud-native systems.

Job Location: Remote

What You Will Do:

• Configure and maintain cloud infrastructure resources within AWS GovCloud and Azure, supporting containerized and serverless architectures in a multi-environment deployment pipeline.

• Design and implement end-to-end automation for infrastructure provisioning, monitoring, and deployment using Terraform, Ansible, and other approved DevSecOps tools.

• Develop and maintain custom automation scripts and CI/CD workflows that reduce manual intervention and ensure consistent, secure deployments.

• Deploy and manage workloads on Amazon ECS, EKS, Lambda, and API Gateway, as well as Azure equivalents, using container orchestration platforms like Red Hat OpenShift and Kubernetes.

• Implement security best practices across the CI/CD lifecycle, including secure secrets management, RBAC, and Zero Trust Architecture enforcement.

• Develop, support, and refine automated test, integration, and release pipelines, ensuring quality, traceability, and compliance with the Client’s modernization goals.

• Build delivery environments that meet DevSecOps standards for redundancy, resilience, and scalability, following Agile and Enterprise Performance Lifecycle (EPLC) methodologies.

• Integrate security tooling (e.g., SAST, DAST, vulnerability scanners, container hardening tools) into CI/CD pipelines via APIs and plug-ins to ensure security controls are embedded from development through deployment.

• Support compliance with federal cybersecurity requirements including NIST SP 800-53, NIST SP 800-137, FISMA, and FedRAMP.

• Implement and maintain controls for certificate management, encryption, key management, and system logging/monitoring, in coordination with the Client’s cybersecurity teams.

What You Will Bring With You:

• Bachelor’s Degree in Computer Science, Information Systems, Engineering or other related scientific or technical discipline

• 2 or more years of experience using AWS resources

• 2 or more years of experience working with Terraform and Ansible

• 1 or more years of experience working with automation tools such as Kubernetes

• US Citizenship or Green Card required due to federal contract requirements

• Must be able to obtain Public Trust clearance.

• MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.)

What We Would Like You To Bring With You:

• Certifications: AWS Certified DevOps Engineer, Azure DevOps Expert, Certified Kubernetes Administrator (CKA), CompTIA Security+, or CISSP.

• Master’s degree

• Strong scripting/programming experience (Python, Bash, Go, etc.).

• Proficiency with CI/CD tools like GitLab CI, Jenkins, GitHub Actions, or CircleCI.

• Experience with container orchestration (e.g., Kubernetes, ECS, AKS).

• Experience supporting agile teams and using tools like Jira and Confluence.

• Familiarity with federal security standards such as FedRAMP, FISMA, and NIST SP 800-53.

• Familiarity with Zero Trust architecture and secure software development frameworks.

Professional Skills:

• Strong critical thinking, problem solving and analytical skills

• Strong oral and written communication skills

• Ability to work independently and collaboratively

• Flexible and willing to accept a change in priorities as necessary

• Demonstrated time management skills

• Strong organizational skills with attention to detail

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer . Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.

Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email [e-mail] and we will be happy to assist . All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

Read more about workplace discrimination righ t s or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.

Candidate AI Usage Policy

At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted . This policy is in place to maintain the integrity and authenticity of the interview process.

However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at [e-mail] . We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.

Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is :

$81,094.00 - $201,840.00Nationwide Remote Office (US99)

About the company

ICF International, Inc. 48 billion in revenue, with approximately 7,000 full and part time employees in more than 90 offices.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at [e-mail] or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report . NYC applicants may request an alternative process or accommodation at [e-mail] or 407-000-0000.