DevSecOps Engineer

PCI Professional Services LLC; Washington (District of Columbia); Hybrid; USD 120,000 - 190,000; Full time

Job summary

PCI Federal (PCIF) seeks a skilled DevSecOps Engineer to lead secure cloud operations for a mission-critical federal portal and data ecosystem. You will design scalable AWS infrastructure, automate deployments, and enforce security across the SDLC in a regulated environment.

Responsibilities span CI/CD, IaC, data pipelines, and governance, working with cloud architects, developers, and federal stakeholders to ensure reliability and compliance.

Qualifications

• Bachelor’s degree in a technical field.
• Minimum 5 years in DevOps/DevSecOps or cloud engineering roles.
• Minimum 3 years hands-on AWS cloud experience.
• Experience with CI/CD pipelines and IaC tools.
• Security practices integrated into SDLC; federal environments.

Responsibilities

• Design, implement, and maintain CI/CD pipelines across applications, infra, and data.
• Develop IaC with Terraform, CloudFormation, or similar tools.
• Automate provisioning, configuration, deployment, and monitoring.
• Maintain automated testing, release validation, and rollback procedures.
• Support release governance and deployment change management.
• Design secure, scalable, and highly available AWS solutions.
• Collaborate on cloud modernization and migration initiatives.
• Integrate security controls across the SDLC and perform security reviews.

Skills

DevSecOps

CI/CD pipelines

AWS security

Scripting

Team leadership

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related

Tools

AWS Glue

Terraform

AWS CloudFormation

Git

Jenkins

GitHub Actions

Azure DevOps

Docker

Kubernetes

IAM

Job description

We are seeking a highly skilled DevSecOps Engineer to support the operation, modernization, security, and continuous enhancement of a mission-critical federal cloud-based information portal and supporting data ecosystem. The successful candidate will serve as a technical leader responsible for secure cloud infrastructure, CI/CD automation, application deployment, security engineering, and cloud migration initiatives within an AWS environment.

This role requires strong expertise in AWS cloud architecture, AWS Glue, cloud security, Infrastructure-as-Code (IaC), and automated deployment practices. The DevSecOps Engineer will work closely with cloud architects, application developers, data engineers, cybersecurity personnel, and government stakeholders to ensure secure, scalable, and reliable system operations. The environment includes complex integrations, reporting platforms, data pipelines, and cloud modernization efforts within a regulated federal environment.

Remote Status: Hybrid

Key Responsibilities

DevSecOps and Automation

• Design, implement, and maintain CI/CD pipelines supporting application, infrastructure, and data deployments.
• Develop Infrastructure-as-Code solutions using tools such as Terraform, CloudFormation, or similar technologies.
• Automate environment provisioning, configuration management, application deployment, and operational monitoring.
• Establish and maintain automated testing, release validation, and rollback procedures.
• Support software release management, version control, and deployment governance processes.
• Drive continuous improvement initiatives that increase deployment efficiency, reliability, and security.

Cloud Architecture and Engineering

• Design and support secure, scalable, and highly available AWS cloud solutions.
• Collaborate with technical teams to implement cloud modernization and migration initiatives.
• Configure, manage, and optimize AWS services such as:
  • AWS Glue
  • AWS Lambda
  • Amazon S3
  • Amazon RDS
  • AWS IAM
  • AWS CloudWatch
  • AWS Secrets Manager
  • AWS EventBridge
  • AWS CloudTrail
  • AWS Config
  • AWS Security Hub
• Support disaster recovery, backup, resilience, and availability strategies.
• Monitor and optimize cloud resource utilization, performance, and operational health.

Security Engineering

• Integrate security controls throughout the software development lifecycle (SDLC).
• Implement automated security scanning, vulnerability detection, compliance monitoring, and remediation workflows.
• Develop and maintain solutions for access management, configuration compliance, and system hardening.
• Conduct security reviews of cloud architectures, applications, APIs, and integrations.
• Support incident response, root cause analysis, corrective action planning, and security reporting.
• Ensure systems comply with federal cybersecurity standards and organizational security requirements.

Data Integration and AWS Glue

• Design, develop, and support AWS Glue ETL pipelines.
• Automate data ingestion, transformation, validation, and reconciliation processes.
• Support integration of multiple enterprise applications, databases, and reporting platforms.
• Implement monitoring, alerting, and operational controls for data processing workflows.
• Ensure data quality, traceability, auditability, and operational transparency across cloud-based data environments.

Operations and Support

• Troubleshoot application, infrastructure, integration, and cloud platform issues.
• Support production deployments and operational maintenance activities.
• Participate in change management and release planning processes.
• Develop technical documentation, standard operating procedures, and system diagrams.
• Collaborate with cross-functional teams to resolve issues and implement enhancements.

Qualifications

Education

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical discipline.

Experience

• Minimum 5 years of experience in DevOps, DevSecOps, Cloud Engineering, or Cloud Security roles.
• Minimum 3 years of hands‑on experience supporting AWS cloud environments.
• Experience implementing and maintaining CI/CD pipelines.
• Experience deploying and managing Infrastructure-as-Code solutions.
• Experience securing cloud‑hosted applications and services.
• Experience supporting production systems in highly regulated environments.
• Experience integrating security practices into software development and deployment processes.
• Experience supporting Federal Government cloud environments.
• Experience working within AWS GovCloud or similarly regulated cloud environments.
• Experience supporting enterprise portals, data platforms, reporting systems, or mission‑critical applications.
• Knowledge of NIST 800‑53, FISMA, FedRAMP, Zero Trust Architecture, and federal cybersecurity requirements.
• Experience with AWS GuardDuty, Security Hub, Inspector, Config, and CloudTrail.
• Experience supporting data analytics, business intelligence, or reporting environments.
• Experience working in Agile development environments.

Technical Skills

• AWS Glue
• Terraform and/or AWS CloudFormation
• Git and Source Control Management
• Jenkins, GitHub Actions, Azure DevOps, or similar tools
• Python, PowerShell, Bash, or comparable scripting languages
• Docker, ECS, EKS, or Kubernetes
• Identity and Access Management (IAM)
• Security Monitoring and Vulnerability Management
• Logging, Monitoring, and Observability Solutions

Preferred Certifications

• AWS Certified Solutions Architect – Associate or Professional
• AWS Certified Security – Specialty
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+

PCI Federal (PCIF) and its subsidiaries are an equal‑opportunity employer. PCIF does not discriminate on the basis of age, sex, race, national origin, religion, marital status, sexual orientation or identity, Veterans or Disability status.

Preference may be extended to qualified Native American Indian candidates in accordance with applicable federal law.