DevSecOps Engineer

Softek Llc; Rockville (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

Softek Llc is seeking a DevSecOps Engineer to join their team in Rockville, MD. You will be responsible for building and maintaining CI/CD pipelines that incorporate security scans throughout the software delivery lifecycle.

In this role, you will collaborate with development teams to automate infrastructure and ensure adherence to federal security standards. Required qualifications include 4+ years of experience in DevOps or DevSecOps, strong familiarity with CI/CD tools, and proficiency in containerization technologies.

Qualifications

• 4+ years of experience in DevOps or DevSecOps roles.
• Strong experience with CI/CD tools.
• Proficiency with containerization technologies.

Responsibilities

• Design and maintain CI/CD pipelines using various tools.
• Integrate security scanning into build pipelines.
• Automate infrastructure provisioning and configuration management.

Skills

CI/CD tools (GitHub Actions, Azure DevOps, Jenkins)

Containerization (Docker, Kubernetes)

Infrastructure-as-code (Terraform, Ansible)

Tools

AWS

Azure

Security scanning tools (SonarQube, Checkmarx, Twistlock)

Job description

Engineering Remote / Rockville, MD Full-time Public Trust

As a DevSecOps Engineer at Softek, you will build and maintain CI/CD pipelines that integrate security scanning at every stage of the software delivery lifecycle. You will automate infrastructure provisioning, implement container orchestration, and ensure that all deployments meet federal security standards. You will work closely with development teams to shift security left and embed compliance into the development workflow.

Key Responsibilities

• Design and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, or Jenkins
• Integrate SAST, DAST, and dependency scanning into build pipelines
• Manage container orchestration with Kubernetes or ECS in government cloud environments
• Automate infrastructure provisioning and configuration management
• Implement monitoring, logging, and alerting solutions
• Collaborate with security teams on vulnerability remediation and compliance

Required Qualifications

• 4+ years of experience in DevOps or DevSecOps roles
• Strong experience with CI/CD tools (GitHub Actions, Azure DevOps, Jenkins)
• Proficiency with containerization (Docker, Kubernetes)
• Experience with infrastructure-as-code (Terraform, Ansible, or similar)
• Ability to obtain and maintain a Public Trust clearance
• U.S. citizenship or permanent residency

Preferred Qualifications

• Experience with security scanning tools (SonarQube, Checkmarx, Twistlock)
• Knowledge of NIST 800-53 and STIG compliance requirements
• AWS or Azure DevOps certificationsExperience supporting ATO processes in federal environments