DevSecOps Engineer

Basecamp Consulting & Solutions LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Basecamp Consulting and Solutions is seeking a DevSecOps Engineer to augment the engineering team with security-forward automation in a hybrid cloud setup. The role focuses on extending Terraform/OpenTofu IaC, building Ansible playbooks for compliance, and creating GitHub Actions pipelines with security gates.

Responsibilities include Docker image hardening, Kubernetes/Helm orchestration with vulnerability scanning, and enforcing policy-as-code (OPA/Rego) in a regulated environment.

Qualifications

• Ability to obtain a Federal Security Clearance
• Terraform & OpenTofu modules and remote state/workspaces
• Ansible playbooks/roles with dynamic inventories
• GitHub Actions reusable workflows and security gates
• Docker authoring/hardening and Kubernetes manifests/Helm with vulnerability scanning
• SAST and secrets scanning tools; policy-as-code (OPA/Rego)
• Git workflows (branching, PR review, protected branches)
• Familiarity with Federal/regulatory requirements (NIST 800-53, FISMA) and AWS familiarity
• Python and Bash scripting for automation and tooling

Responsibilities

• Extend infrastructure automation in a hybrid cloud environment
• Maintain Terraform & OpenTofu IaC modular configs and remote state
• Develop Ansible playbooks/roles for CAC, patching, and compliance
• Build GitHub Actions CI/CD pipelines with security gates
• Manage Docker image hardening and Kubernetes/Helm orchestration with vulnerability scanning
• Integrate Shift-Left security and CIS/CBO baselines
• Adhere to change advisory, version control, and peer-review processes

Skills

Terraform & OpenTofu usage

Ansible playbooks

GitHub Actions

Docker & Kubernetes security

SAST & secrets scanning

Policy-as-code (OPA/Rego)

Git workflows

Python & Bash scripting

Compliance knowledge (NIST/FISMA)

Tools

Terraform

OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes

Semgrep

Checkov

tfsec

Gitleaks

Detect-Secrets

OPA/Rego

Job description

ORGANIZATIONAL BACKGROUND

Established in August 2016, Basecamp Consulting and Solutions is a dynamic Information Technology (IT) consulting firm committed to delivering results for our clients. Specializing in next-generation IT and digital transformation solutions, Basecamp Consulting and Solutions is dedicated to helping clients achieve success through trust, innovation, quality work, and a steadfast commitment to results.

At Basecamp, we believe in the power of emerging technologies to propel our clients toward their goals. Our focus lies in business and IT modernization, utilizing Cloud solutions, cybersecurity, and cutting-edge application development. We pride ourselves on a team of talented professionals who are passionate about supporting our clients on their journey towards innovative outcomes.

Basecamp Consulting and Solutions is dedicated to pushing the boundaries of IT consulting and we are equally committed to embodying these principles in every facet of our work.

POSITION OVERVIEW

Reporting to the Program Manager, the DevSecOps Engineer augments CBO engineering team to extend infrastructure automation and secure delivery in a hybrid cloud environment. Maintains/extends Terraform & OpenTofu IaC (modular configs, remote state); develops Ansible playbooks/roles (CaC, patching, compliance); builds GitHub Actions CI/CD with security gates (SAST, dependency/secrets scanning, policy-as-code); manages Docker image hardening and Kubernetes/Helm orchestration with vulnerability scanning; integrates Shift-Left security and CIS/CBO baselines. Inherits existing patterns (no design-from-scratch); works within CBO change advisory, version control, peer review.

REQUIRED QUALIFICATIONS

• Ability to obtain a Federal Security Clearance


• Terraform & OpenTofu (modules, remote state, workspaces);


• Ansible (playbooks/roles, dynamic inventories, Vault);


• GitHub Actions (reusable workflows, matrix builds, security gates);


• Docker authoring/hardening, Kubernetes manifests/Helm, container scanning (Trivy, Grype, or equiv.);


• SAST (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), policy-as-code (OPA/Rego);


• Git workflows (branching, PR review, protected branches).


• Preferred: Federal/regulated experience; NIST 800-53/FISMA/FedRAMP familiarity; AWS; HashiCorp Vault; Python & Bash.


• Compliance: NIST 800-53 Rev 5, 800-171, 800-207, FISMA.