DevSecOps Engineer

Softek Enterprises LLC; Rockville (MD); Remote; USD 120,000 - 180,000; Full time

Job summary

Softek Enterprises LLC is seeking a DevSecOps Engineer in Rockville, MD for a full-time role with remote options. You will design and maintain CI/CD pipelines, automate infrastructure provisioning, and embed security into the software delivery lifecycle to meet federal standards.

You will collaborate with development and security teams, integrate SAST/DAST, manage Kubernetes/ECS in government cloud environments, and help shift security left across projects.

Qualifications

• 4+ years in DevOps or DevSecOps roles.
• Proficient with CI/CD tools (GitHub Actions, Azure DevOps, Jenkins).
• Containerization experience with Docker and Kubernetes.
• Infrastructure as code using Terraform or Ansible.
• Ability to obtain and maintain a Public Trust clearance.
• U.S. citizenship or permanent residency.

Responsibilities

• Design and maintain CI/CD pipelines with security scanning at every stage of the software delivery lifecycle.
• Automate infrastructure provisioning and configuration management.
• Implement container orchestration and deployment in government cloud environments.
• Integrate SAST, DAST, and dependency scanning into build pipelines.
• Collaborate with security teams on vulnerability remediation and compliance.
• Implement monitoring, logging, and alerting solutions.

Skills

DevSecOps experience

Security minded

Tools

GitHub Actions

Azure DevOps

Jenkins

Docker

Kubernetes

Terraform

Ansible

Job description

Engineering Remote / Rockville, MD Full-time Public Trust

As a DevSecOps Engineer at Softek, you will build and maintain CI/CD pipelines that integrate security scanning at every stage of the software delivery lifecycle. You will automate infrastructure provisioning, implement container orchestration, and ensure that all deployments meet federal security standards. You will work closely with development teams to shift security left and embed compliance into the development workflow.

Key Responsibilities

• Design and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, or Jenkins
• Integrate SAST, DAST, and dependency scanning into build pipelines
• Manage container orchestration with Kubernetes or ECS in government cloud environments
• Automate infrastructure provisioning and configuration management
• Implement monitoring, logging, and alerting solutions
• Collaborate with security teams on vulnerability remediation and compliance

Required Qualifications

• 4+ years of experience in DevOps or DevSecOps roles
• Strong experience with CI/CD tools (GitHub Actions, Azure DevOps, Jenkins)
• Proficiency with containerization (Docker, Kubernetes)
• Experience with infrastructure-as-code (Terraform, Ansible, or similar)
• Ability to obtain and maintain a Public Trust clearance
• U.S. citizenship or permanent residency

Preferred Qualifications

• Experience with security scanning tools (SonarQube, Checkmarx, Twistlock)
• Knowledge of NIST 800-53 and STIG compliance requirements
• AWS or Azure DevOps certifications
• Experience supporting ATO processes in federal environments

8(a) sole source up to $4.5M. HUBZone. GSA MAS 47QTCA18D007G.