DevSecOps Engineer

The Ed Wallach Search Group; Reston (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

The Ed Wallach Search Group is seeking an experienced DevSecOps Engineer to advance secure software delivery across complex environments in Reston, VA. You will design and implement secure CI/CD pipelines, strengthen software supply-chain integrity, and automate security checks across development, testing, and production.

Work with Azure DevOps Server, Nexus, SonarQube, and Kubernetes/K3s to connect tools into automated delivery pipelines, enabling faster, safer software releases while meeting

Qualifications

• 5+ years in DevOps/DevSecOps or related field.
• Hands-on Azure DevOps pipelines experience including YAML, build/release workflows, repositories, artifacts, permissions, or agent-based builds.
• Experience integrating security, quality, or compliance controls into CI/CD pipelines.
• Knowledge of secure software delivery practices (SAST, SCA, dependency scanning, secrets management, container scanning).
• Experience diagnosing and resolving CI/CD pipeline failures and deployment issues.
• Working experience with Kubernetes, K3s, containers, Helm, or similar technologies.
• Scripting experience in PowerShell, Bash, Python, or similar languages.
• Ability to communicate complex technical concepts clearly and develop effective technical documentation, runbooks, onboarding guides.
• Ability to obtain and maintain a U.S. security clearance.
• Willingness to work in regulated, secure environments.

Responsibilities

• Design, build, and improve secure CI/CD pipelines using Azure DevOps.
• Create reusable YAML templates, automated quality gates, artifact controls, and release safeguards.
• Promote consistency across development, test, integration, staging, and production environments.
• Troubleshoot pipeline failures, build and dependency issues, permissions challenges, and deployment blockers.
• Identify opportunities to reduce manual processes and improve release reliability.
• Embed security/quality controls (SAST, SCA, dependency scanning, secrets management, container scanning) into workflows.
• Manage artifacts and code-quality platforms with Nexus, SonarQube, and Azure DevOps artifacts.
• Collaborate with cybersecurity teams to translate security requirements into engineering controls aligned with SSP, RMF, NIST, CMMC, STIG, Zero Trust.

Skills

DevOps

DevSecOps

Automation

Azure DevOps

CI/CD

Kubernetes

Scripting

Documentation

Security clearance

Communication

Tools

Nexus

SonarQube

Azure DevOps

Helm

Terraform

Job description

Location: Reston, VA

Security Clearance: US Citizen/Clearable

Build. Secure. Automate. Deliver.

Help shape the future of secure software delivery across the enterprise.

We are seeking an experienced DevSecOps Engineer to help advance how software is built, secured, tested, and delivered across complex, mission-focused environments. Based in our Reston, VA office, this is an opportunity to apply your engineering expertise to meaningful challenges at the intersection of software development, cybersecurity, automation, and platform engineering.

This is a hands-on engineering position for someone who understands that security should be built into the software delivery lifecycle—not bolted on at the end. You will help design and implement secure CI/CD pipelines, strengthen software supply-chain integrity, automate security and quality controls, and establish repeatable deployment practices that enable development teams to move faster without compromising security or reliability.

Working closely with software developers, cybersecurity professionals, platform engineers, systems engineers, and program teams, you will have an opportunity to influence enterprise engineering practices and make secure software delivery more efficient, consistent, and scalable.

Our environment includes Azure DevOps Server, Nexus, SonarQube, and Kubernetes/K3s deployment workflows. You will help connect these technologies into cohesive, automated delivery pipelines that support development, integration, testing, staging, and production environments.

If you enjoy solving complex engineering problems, building automation that makes a difference, and turning security requirements into practical technical solutions, this role offers an opportunity to make a meaningful impact.

What You’ll Do

Engineer Secure CI/CD Pipelines

• Design, build, and continuously improve secure CI/CD pipelines using Azure DevOps, including reusable YAML templates, automated quality gates, artifact controls, and release safeguards.
• Develop standardized build and release patterns that promote consistency, repeatability, and security across development, test, integration, staging, and production environments.
• Troubleshoot complex pipeline failures, build and dependency issues, permissions challenges, security scan failures, and deployment blockers.
• Identify opportunities to reduce manual processes, eliminate recurring delivery issues, and improve the reliability and efficiency of software releases.

Strengthen Software Supply-Chain Security

• Embed security and software quality controls directly into development and release workflows, including SAST, SCA, dependency scanning, secrets detection, container scanning, code-quality gates, and artifact validation.
• Implement and support software artifact and code-quality management capabilities using platforms such as Nexus, SonarQube, and Azure DevOps artifacts.
• Help improve software supply-chain integrity through automated security checks, dependency visibility, artifact governance, and secure release practices.
• Partner with cybersecurity teams to translate security requirements into practical engineering controls aligned with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements.

Enable Secure Kubernetes Deployments

• Collaborate with platform engineering teams to establish and implement secure Kubernetes/K3s deployment standards and guardrails.
• Support security configurations involving namespaces, RBAC, ServiceAccounts, Helm, ingress, TLS, storage, resource quotas, and workload security.
• Help standardize deployment patterns and automate security practices across containerized application environments.
• Develop technical documentation, reusable examples, runbooks, and onboarding materials that help development teams adopt secure pipeline and deployment practices.

Drive Engineering Excellence and Developer Enablement

• Work directly with development and engineering teams to identify and resolve friction points in software delivery.
• Monitor pipeline health, security scan outcomes, recurring release blockers, and control gaps.
• Turn lessons learned and recurring technical challenges into automation, reusable templates, improved tooling, and more effective engineering standards.
• Promote a collaborative DevSecOps culture that makes secure software delivery an integral part of how teams engineer and deploy software.

What You Bring

We are looking for an engineer who combines strong DevOps fundamentals with practical security knowledge, automation skills, and the ability to work across diverse technical teams.

Required Qualifications

• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical discipline.
• Hands-on experience developing, managing, or improving Azure DevOps pipelines, including YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds.
• Demonstrated experience integrating security, quality, or compliance controls into CI/CD pipelines.
• Practical knowledge of secure software delivery practices, including SAST, SCA, dependency scanning, secrets management, code-quality gates, artifact controls, or container scanning.
• Experience diagnosing and resolving CI/CD pipeline failures, build issues, deployment problems, permissions challenges, and dependency-related errors.
• Working experience with Kubernetes, K3s, containers, Helm, or comparable container orchestration and deployment technologies.
• Scripting and automation experience using PowerShell, Bash, Python, or similar languages.
• Ability to communicate complex technical concepts clearly and develop effective technical documentation, runbooks, onboarding guides, and troubleshooting procedures.
• Ability to obtain and maintain a U.S. security clearance.
• Willingness and ability to work in regulated, secure, and compliance-driven technical environments.

What Sets You Apart

The following experience is highly desirable:

• Active U.S. security clearance.
• Experience working with Azure DevOps Server in enterprise or secure environments.
• Experience integrating, configuring, or administering Nexus, SonarQube, or comparable artifact-management and code-quality platforms.
• Familiarity with software supply-chain security practices, including SBOM generation, SCA, container scanning, artifact signing, and software provenance.
• Experience implementing policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies.
• Infrastructure-as-Code or Configuration-as-Code experience using Terraform, Ansible, Bicep, CloudFormation, or similar technologies.
• Experience with observability and monitoring platforms such as Prometheus, Grafana, and Loki.

Background supporting defense, federal government, or other mission-critical programs operating under NIST 800-171, CMMC, RMF, STIG, or similar security frameworks.

The Opportunity

This is an opportunity to do more than maintain pipelines or monitor security findings. You will help engineer the capabilities, automation, and technical standards that make secure software delivery possible at enterprise scale.

You will work alongside multidisciplinary engineering and cybersecurity teams, solve real-world technical challenges, and help shape how software is developed and delivered in environments where security, reliability, and mission success matter.

Bring your engineering mindset. Strengthen the software supply chain. Help build a more secure path from code to production.