DevSecOps Engineer

Jobtailor; Leesburg (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking a Senior DevOps/Platform Engineer to design, build, and scale secure infrastructure in a fast-moving startup environment in the DC metro area. You will own AWS/Terraform deployments, Kubernetes platforms, and automated compliance workflows for federal and enterprise customers.

The role requires 7+ years in DevOps or SRE, hands-on Terraform and Kubernetes experience, and strong security posture alignment with NIST/OSCAL standards. U.S.

Qualifications

• 7+ years in DevOps, Platform Engineering, or Site Reliability Engineering.

Responsibilities

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery.
• Manage AWS cloud infrastructure, with exposure to Azure/GCP, using Terraform.
• Administer and scale containerized workloads using Kubernetes/EKS, Helm, and ArgoCD.
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks.
• Design observability strategies covering logging, metrics, alerting, and SLOs for production reliability at scale.
• Integrate GitHub, JIRA, Splunk, and Snyk into automated compliance and remediation workflows.
• Collaborate with engineering and compliance teams to maintain continuous authorization posture.
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping.
• Troubleshoot production issues and improve deployment reliability.
• Build and maintain documentation, runbooks, and architecture decision records.
• Represent infrastructure and security in cross-functional planning and customer-facing technical conversations.
• Deploy, integrate, and operationalize the Kovr AI Platform within enterprise and federal customer environments.
• Build integrations with customer DevSecOps toolchains, automate evidence collection and continuous monitoring, and configure compliance workflows that accelerate ATO

Skills

CI/CD pipeline design

AWS infrastructure design

Kubernetes cluster management

Terraform module design

SRE / DevSecOps

Scripting (Python Bash)

Security controls implementation

Compliance automation

Observability strategy

Tools

GitHub

JIRA

Splunk

Snyk

Kovr AI Platform

ArgoCD

Helm

Terraform

Job description

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery
• Manage AWS cloud infrastructure, with exposure to Azure/GCP, using Terraform, including module design and reusable patterns
• Administer and scale containerized workloads using Kubernetes/EKS, Helm, and ArgoCD
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks
• Design observability strategies covering logging, metrics, alerting, and SLOs for production reliability at scale
• Integrate GitHub, JIRA, Splunk, and Snyk into automated compliance and remediation workflows
• Collaborate with engineering and compliance teams to maintain continuous authorization posture
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping
• Troubleshoot production issues and improve deployment reliability
• Build and maintain documentation, runbooks, and architecture decision records
• Represent infrastructure and security in cross-functional planning and customer-facing technical conversations
• Deploy, integrate, and operationalize the Kovr AI Platform within enterprise and federal customer environments
• Build integrations with customer DevSecOps toolchains, automate evidence collection and continuous monitoring, and configure compliance workflows that accelerate ATO

Requirements

• 7+ years of DevOps, Platform Engineering, or Site Reliability Engineering experience
• Hands-on experience architecting AWS infrastructure using Terraform at scale
• Strong production experience with Kubernetes (EKS or similar), including cluster design, Helm Charts, and GitHub/GitOps workflows
• Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments
• Familiarity with OSCAL or other machine-readable compliance/documentation frameworks
• Experience integrating SAST/DAST or IaC security scanning into a pipeline
• Scripting/automation proficiency (Python, Bash, or similar)
• U.S. Citizenship
• Ability to obtain and maintain a Top Secret clearance
• Comfortable working in a fast-moving startup-within-a-company environment
• Local to Washington, DC metro area
• Existing security or cloud certifications preferred (Security+, AWS Certified Security, CYSA+, CISSP)
• Experience integrating LLM coding agents, MCPs, and automations into DevOps workflows preferred
• Prior experience holding or maintaining a Top Secret security clearance preferred
• Background supporting federal DevSecOps deployments or highly regulated commercial clients preferred
• Ability to work in the United States without sponsorship

Core Competencies

Demonstrates expertise in designing and maintaining CI/CD pipelines, managing AWS cloud infrastructure with Terraform, and implementing security controls aligned with NIST standards. Proficient in Kubernetes for container orchestration and integrating compliance workflows within DevSecOps environments.

Highest-signal resume keywords

• AWS Infrastructure Architecture
• Terraform Module Design
• Kubernetes Cluster Management
• NIST 800-53 Compliance
• Scripting Proficiency (Python, Bash)

ATS Optimization Keywords

Hard Skills

• CI/CD Pipeline Design
• AWS Management
• Terraform
• Kubernetes
• Helm
• ArgoCD
• Scripting (Python, Bash)
• Security Controls Implementation
• Compliance Automation
• Observability Strategies

Soft Skills

• Collaboration
• Problem-Solving
• Communication

Certifications & Qualifications

• Security+
• AWS Certified Security
• CYSA+
• CISSP

Industry Keywords

• DevOps
• Platform Engineering
• Site Reliability Engineering
• FedRAMP
• CMMC
• DoD SRG
• OSCAL
• Continuous Monitoring
• Audit-Readiness
• Top Secret Clearance

Tools & Technologies

• GitHub
• JIRA
• Splunk
• Snyk
• Kovr AI Platform