DevSecOps Engineer

Cyrad Solutions LLC; Reston (VA); On-site; USD 110,000 - 180,000; Full time

Job summary

Cyrad Solutions LLC is seeking an experienced DevSecOps Engineer in Reston, VA to modernize secure software delivery across complex environments. You will design and improve CI/CD pipelines, embed security into development, and enable scalable deployment practices for enterprise teams.

Ideal candidates have strong automation, platform engineering, and cybersecurity understanding, with hands-on work across CI/CD, artifacts, and container security.

Qualifications

• Minimum 5 years in DevOps/DevSecOps or platform engineering.
• Experience building and maintaining CI/CD pipelines in enterprise environments.
• Experience integrating automated security controls (SAST/SCA) into workflows.
• Strong understanding of secure software delivery and artifact security.
• Hands-on with containerized apps and Kubernetes/K3s.
• Scripting experience (Python, Bash, PowerShell).

Responsibilities

• Design, implement, and optimize secure CI/CD pipelines using Azure DevOps.
• Integrate security testing and compliance checks into delivery workflows.
• Support artifact management and code-quality processes using Nexus and SonarQube.
• Develop secure deployment practices for containerized apps on Kubernetes/K3s.
• Troubleshoot pipelines, builds, dependencies, and deployments.
• Automate repetitive tasks to improve release reliability and efficiency.
• Collaborate with software engineers and security teams to implement controls.
• Create reusable pipeline templates and operational runbooks.

Skills

CI/CD pipelines

Azure DevOps

Security testing

Python/Bash/PowerShell

Container security

Kubernetes/K3s

Nexus/SonarQube

Terraform/Ansible

SAST/SCA/secrets detection

Vulnerability management

Tools

Azure DevOps

Nexus

SonarQube

Kubernetes

K3s

Terraform

Ansible

Prometheus

Grafana

Job description

Location: Reston, VA
Work Model: On-site (Reston, VA)
Compensation: Competitive, Based on Experience

Overview

We're seeking an experienced DevSecOps Engineer to help modernize and scale secure software delivery across complex, mission-critical environments.

This is a hands-on engineering opportunity focused on building secure, automated, and reliable software delivery systems. You'll design and improve CI/CD pipelines, integrate security controls into development workflows, and help establish scalable deployment practices across enterprise engineering teams.

The ideal candidate combines strong automation and platform engineering skills with a practical understanding of cybersecurity. You'll have the opportunity to influence how software moves from development into production, solve challenging infrastructure problems, and build tools and processes that make engineering teams more effective.

What You'll Do

• Design, implement, and optimize secure CI/CD pipelines using Azure DevOps, including YAML templates, automated quality gates, and release controls.
• Integrate security testing and compliance checks into software delivery workflows, including SAST, SCA, secrets detection, dependency scanning, and container security.
• Support artifact management and code-quality processes using tools such as Nexus, SonarQube, and Azure DevOps.
• Develop and standardize secure deployment practices for containerized applications running on Kubernetes and K3s.
• Troubleshoot complex pipeline, build, dependency, permissions, and deployment issues.
• Automate repetitive engineering tasks and improve the reliability, consistency, and efficiency of software releases.
• Collaborate with software engineers, cybersecurity teams, and platform engineers to implement practical security controls.
• Create reusable pipeline templates, technical documentation, and operational runbooks to support engineering teams.

What We're Looking For

• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, or a related technical discipline.
• Hands-on experience building and maintaining CI/CD pipelines using Azure DevOps.
• Experience integrating automated security and quality controls into software development workflows.
• Strong understanding of secure software delivery, including vulnerability scanning, dependency management, and artifact security.
• Experience with containerized applications and Kubernetes, K3s, or comparable orchestration platforms.
• Scripting and automation experience using Python, Bash, PowerShell, or similar languages.
• Strong troubleshooting skills across CI/CD pipelines, build systems, and deployment infrastructure.
• Ability to collaborate across technical disciplines and communicate complex engineering concepts clearly.
• Ability to obtain and maintain a U.S. security clearance.

Preferred

• Active U.S. security clearance.
• Experience with Azure DevOps Server in secure or enterprise environments.
• Hands-on experience with Nexus, SonarQube, or comparable artifact-management and code-quality platforms.
• Familiarity with software supply-chain security, including SBOMs, artifact signing, and software provenance.
• Experience with Helm, Kubernetes RBAC, admission controls, or policy-as-code.
• Infrastructure-as-Code experience with Terraform, Ansible, or similar technologies.
• Experience with observability tools such as Prometheus, Grafana, or Loki.
• Familiarity with NIST, RMF, CMMC, STIG, or comparable security and compliance frameworks.