DevSecOps Engineer

Intellect Solutions LLC; Virginia, Northern (IL, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Intellect Solutions LLC is seeking a DevSecOps Engineer to embed security into the software delivery lifecycle. You will design, implement, and operate secure CI/CD pipelines, cloud infrastructure, automation, and security controls to enable teams to ship reliable software quickly and safely.

The role requires hands-on engineering with a strong focus on application and cloud security, infrastructure as code, and modern delivery practices.

Qualifications

• Active Secret clearance or higher is required.
• Hands-on engineering experience with secure CI/CD and cloud infrastructure.
• Strong knowledge of application and cloud security, IaC, and modern software delivery.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across environments.
• Embed automated security testing into the SDLC (SAST, DAST, SCA, container scanning).
• Develop infrastructure as code using Terraform, CloudFormation, or Ansible.
• Apply security controls across cloud platforms, containers, Kubernetes, APIs.
• Establish policy-as-code and deployment guardrails.
• Monitor and remediate security events in pipelines and infra.

Skills

CI/CD security

Static application security testing

Dynamic testing

Software composition analysis

Container security

Secrets detection

Threat modeling

Secure coding practices

Monitoring security events

Tools

Terraform

CloudFormation

Ansible

Kubernetes

CI/CD tooling

Job description

Clearance: Need Active Secret or above

Seeking a DevSecOps Engineer to integrate security into the software development and delivery lifecycle. This role will design, implement, and operate secure CI/CD pipelines, cloud infrastructure, automation, and security controls that enable development teams to deliver reliable software quickly and safely. The ideal candidate combines hands‑on engineering expertise with a strong understanding of application security, cloud security, infrastructure as code, and modern software delivery practices. This role partners closely with software engineers, platform teams, architects, cybersecurity teams, and compliance stakeholders.

Key Responsibilities

• Design, implement, and maintain secure CI/CD pipelines across development, test, and production environments.
• Embed automated security testing into the software development lifecycle, including static application security testing, dynamic testing, software composition analysis, container scanning, and secrets detection.
• Develop and manage infrastructure as code using tools such as Terraform, CloudFormation, or Ansible.
• Implement security controls across cloud platforms, containers, Kubernetes, APIs, and enterprise applications.
• Establish and enforce policy-as-code, secure configuration standards, and deployment guardrails.
• Integrate vulnerability management findings into engineering workflows and support timely remediation.
• Partner with development teams to identify security risks, perform threat modeling, and improve secure coding practices.
• Automate security, compliance, and operational processes to improve consistency and reduce manual effort.
• Monitor pipeline, infrastructure, and application security events; support investigation and remediation of security incidents.
• Maintain technical documentation, runbooks, architecture diagrams, and control evidence.
• Contribute to security architecture reviews, technology evaluations, and continuous improvement initiatives.
• Support compliance with applicable organizational policies, contractual requirements, and regulatory frameworks