DevSecOps Engineer

Pantheon Data LLC.; Reston, Northern (VA, KY); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

SmartBenefits (SmarTrip)

Tuition assistance

Competitive salary and benefits

Job summary

Pantheon Data LLC seeks a DevSecOps Engineer to design and operate secure, cloud-native platforms in AWS GovCloud for ML workloads handling CUI/PII/PHI. You will automate gated security across CI/CD pipelines using GHAS or GitLab and administer production-grade EKS clusters via GitOps in strict compliance with NIST, FedRAMP, and DoD RMF.

Responsibilities include designing hardened environments, managing EKS with Helm, implementing GitOps, and enabling secure CI/CD with GHAS and CodeQL.

Qualifications

• 3+ years in DevSecOps/DevOps focusing on production AWS environments.
• Experience building enterprise-grade pipelines with GitHub Actions or equivalent CI/CD tools.
• Deep knowledge of code security tools and SAST integrations.
• Hands-on Kubernetes/EKS cluster hardening and Helm packaging.
• Familiarity with NIST 800-53, FedRAMP, and DoD RMF in GovCloud.
• Automation scripting in Python or Bash for security tooling.

Responsibilities

• Design hardened AWS GovCloud environments aligning with NIST and FedRAMP.
• Manage EKS clusters lifecycle, networking, and security with GitOps (Argo CD/Flux).
• Build robust CI/CD pipelines with GHAS integration and CodeQL for security.
• Deploy and scale containerized ML workloads in regulated environments.

Skills

DevSecOps

AWS GovCloud

CI/CD

Terraform

Kubernetes

GitHub Actions

GHAS

GitOps

Helm

Argo CD

CodeQL

NIST 800-53

FedRAMP

DoD RMF

Python/Bash scripting

Education

AWS Certifications (DevOps Engineer or Security Specialty)

Tools

GitHub Actions

GitLab CI/CD

Argo CD

Flux

Terraform

Amazon EKS

CodeQL

Job description

Company Overview

Pantheon Data (a Kenific Holding company) is a private, small business based in the Washington, DC, area. Pantheon Data was founded in 2011, initially providing acquisition and supply chain management services to the US Coast Guard. Our service offerings have grown in the past ten years, including infrastructure resiliency, contact center operations, information technology, software engineering, program management, strategic communications, engineering, and cybersecurity. We have also grown our customer base to include commercial clients. The company has used this experience to expand our service offerings to other agencies within the Department of Homeland Security (DHS), the Department of Defense (DoD), and other Federal Civilian Agencies.

Position Overview

Pantheon Data is seeking a DevSecOps Engineer to design and operate in a secure, cloud-native platforms within AWS GovCloud. This role focuses on supporting ML-enabled workloads and applications processing CUI, PII, and PHI. The candidate will automate gated security controls across CI/CD pipelines using GitHub Advanced Security (GHAS) or GitLab CI/CD and administrate production-grade Amazon EKS clusters via GitOps methodologies under strict federal compliance frameworks (NIST 800-53, FedRAMP, DoD SRG).

Responsibilities

• Secure Infrastructure: Design hardened AWS GovCloud environments using Terraform, ensuring alignment with NIST 800-53 and FedRAMP baselines.
• Kubernetes & GitOps: Manage lifecycle, networking, and security for Amazon EKS clusters. Orchestrate deployments using Helm charts and GitOps tools (e.g., Argo CD or Flux) to ensure declarative state management.
• Secure CI/CD Engineering: Design and implement robust CI/CD pipelines using GitHub Actions or GitLab CI/CD. Integrate and configure GitHub Advanced Security (GHAS) and additional relevant tools, including CodeQL for SAST, secret scanning, and dependency review.
• ML Workload Support: Deploy and scale containerized ML models and data pipelines, optimizing performance and observability in regulated environments.

Required Skills and Experience

• Professional Experience: 3+ years in DevSecOps/DevOps with a focus on production AWS environments.
• CI/CD Expertise: Proven experience building enterprise-grade pipelines with GitHub Actions or other CI/CD tools and deep technical knowledge of code security tools.
• Container Orchestration: Deep hands-on expertise with Amazon EKS, including cluster hardening, OCI-compliant image management, and Helm package management.
• Infrastructure as Code: Proficiency in Terraform (modular design, state management) for complex networking and security stacks.
• Federal Compliance: Practical understanding of NIST SP 800-53, FedRAMP, or DoD RMF and their application to technical configurations in GovCloud.
• Automation: Scripting proficiency in Python or Bash for operational automation and security tooling.
• Certification: Current AWS Certified DevOps Engineer or Security - Specialty.
• Ability to work effectively remotely in cross-functional teams.
• Ability to meet deadlines and produce quality work.
• Proficient in Microsoft Suite software including Outlook, Word, Excel, SharePoint, and PowerPoint.

Preferred Skills and Experience

• 3+ years of professional, hands-on experience in a DevOps or DevSecOps engineering role, including responsibility for production or pre-production environments.
• At least one current AWS certification recommended, such as AWS Certified Solutions Architect, AWS Certified SysOps Administrator, AWS Certified DevOps Engineer, or AWS Certified Security.

Clearance Requirements

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements. Secret Clearance is required for continued employment.

Work Location:

Reston, VA - Remote

• Our company prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.
• If the position is remote or hybrid, you may periodically work from a Pantheon Data office location or client site.
• If this position is assigned to a Pantheon Data office location or client site, you'll work with colleagues and clients in person, as needed for specific client requirements.

Compensation

The salary range for this position is $100,000 - $130,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Benefits Overview

• We are always looking for good people! Pantheon Data is committed to providing its employees with competitive salaries and benefits in order to increase employee satisfaction and productivity.
• In addition to our benefits, we also offer SmartBenefits through the Washington Metro Area Transportation Authority, where you specify an amount of your pre-tax wages be paid directly to your SmarTrip account.
• In some cases, tuition assistance may be available for continuing education expenses and certifications related to their position.
• Additional details may be found at https://pantheon-data.com/careers/

Pantheon Data Important Information

All qualified applicants will be considered for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our Talent Team at [e-mail] or by phone [phone].

This company uses E-Verify to confirm each employee's work authorization. For more information, click here E-Verify Participation Poster