DevSecOps Engineer

Info Gain Consulting; McLean (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Info Gain Consulting seeks a DevSecOps Engineer to support Congressional Budget Office IT operations under the Sentry contract. The role focuses on building secure infrastructures with Terraform/OpenTofu, managing remote state, and creating automated pipelines with GitHub Actions.

You will implement SAST, secret detection, and policy-as-code controls while hardening Docker, Kubernetes, and Helm stacks according to CIS/NIST guidelines, contributing to sprint delivery and change-management

Qualifications

• Experience securing infrastructure and pipelines in a government IT environment.
• Strong IaC practices with Terraform/OpenTofu and automation tooling.
• Proficiency with CI/CD security gates and policy-as-code controls.

Responsibilities

• Develop Terraform and OpenTofu modules for IaC.
• Manage remote state, workspaces and related IaC controls.
• Create Ansible playbooks, inventories, and Vault-based secrets management.
• Build GitHub Actions CI/CD pipelines with security gates.
• Implement SAST, dependency scanning, secret detection, and policy-as-code.

Skills

DevSecOps

Security automation

Infrastructure as code

CI/CD security

Tools

Terraform

OpenTofu

Ansible

Vault

GitHub Actions

Docker

Kubernetes

Helm

Job description

Info Gain Consulting is currently seeking an exceptional DevSecOps Engineer to join our team. You will be supporting and provide invaluable support to the Congressional Budget office IT support- Sentry contract.

• Develop Terraform and OpenTofu infrastructure-as-code modules.
• Manage remote state, workspaces, and related IaC controls.
• Develop Ansible playbooks, roles, dynamic inventories, and Vault-based secrets management.
• Develop GitHub Actions CI/CD pipelines with security gates.
• Implement SAST, dependency scanning, secret detection, and policy-as-code controls.
• Manage and harden Docker, Kubernetes, and Helm environments.
• Apply CIS benchmarks and NIST SP 800-53 security-hardening requirements.
• Contribute peer-reviewed code and support sprint-based delivery.
• Follow formal change-advisory and configuration-management processes.