DevSecOps Engineer

STS Worldwide Inc.; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Job summary

STS Worldwide Inc. is seeking a DevSecOps Engineer to build and operate secure delivery pipelines on AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices and AI-assisted tooling across the SDLC.

Responsibilities include creating pipelines with CodePipeline/CodeBuild, coding infrastructure with CDK/CloudFormation, and integrating SAST/DAST/SCA with policy-as-code to meet FedRAMP/NIST requirements.

Qualifications

• 3+ years of DevOps/DevSecOps engineering experience.
• Hands-on AWS and infrastructure-as-code (CDK/CloudFormation).
• Experience with CI/CD tooling and security automation.
• Scripting experience (Python, Bash, or similar).

Responsibilities

• Build and maintain CI/CD pipelines using AWS-native tooling (CodePipeline, CodeBuild).
• Implement infrastructure-as-code with AWS CDK/CloudFormation.
• Integrate security scanning (SAST/DAST/SCA) and policy-as-code into pipelines.
• Automate compliance evidence for FedRAMP/NIST controls.
• Support environment provisioning and deployment automation (blue/green, canary).
• Embed AI-assisted tooling for scanning, testing, and pipeline authoring.

Skills

DevSecOps experience

AWS & IaC

CI/CD & security automation

Scripting (Python, Bash)

Tools

CodePipeline

CodeBuild

AWS CDK

CloudFormation

Job description

Position Summary

The DevSecOps Engineer builds and operates the secure delivery pipelines for the platform on AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices and AI-assisted tooling across the SDLC.

Key Responsibilities

• Build and maintain CI/CD pipelines using AWS-native tooling (CodePipeline, CodeBuild)
• Implement infrastructure-as-code with AWS CDK/CloudFormation
• Integrate security scanning (SAST/DAST/SCA) and policy-as-code into pipelines
• Automate compliance evidence for FedRAMP/NIST controls
• Support environment provisioning and deployment automation (blue/green, canary)
• Embed AI-assisted tooling for scanning, testing, and pipeline authoring
• Monitor pipeline health and improve delivery metrics

Required Qualifications

• 3 years of DevOps/DevSecOps engineering experience
• Hands-on AWS and infrastructure-as-code (CDK/CloudFormation)
• Experience with CI/CD tooling and security automation
• Scripting experience (Python, Bash, or similar)

Preferred Qualifications

• AWS certification (DevOps or Security)
• FedRAMP/NIST experience
• Familiarity with AI-assisted DevSecOps tooling