DevSecOps Engineer

Jobtailor; Washington (District of Columbia); On-site; USD 140,000 - 210,000; Full time

Job summary

Jobtailor is seeking a senior DevSecOps/Cloud Engineer to design, build, and sustain secure CI/CD pipelines for enterprise applications. The role emphasizes IaC with Terraform/OpenTofu, container orchestration with Docker/Kubernetes, and integrated security across all stages of development and deployment.

You will collaborate with software, cloud, cybersecurity, and operations teams, automate security testing and configuration management, and support federal compliance initiatives.

Qualifications

• Bachelor's degree or equivalent in IT/CS/cybersecurity or related field.
• 5+ years in DevOps/DevSecOps, Cloud Engineering, or SRE.
• Experience building CI/CD pipelines with GitHub/GitLab/Azure DevOps/Jenkins.
• IaC experience with Terraform or OpenTofu.
• Docker and Kubernetes experience.
• Automated security testing in CI/CD pipelines.
• Experience with GitHub/GitLab, and cloud platforms (AWS/Azure).
• Ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Design, develop, and maintain secure CI/CD pipelines for enterprise apps.
• Develop and manage IaC solutions using Terraform or OpenTofu.
• Build and support containerized environments with Docker and Kubernetes.
• Integrate security controls into development and deployment pipelines.
• Automate security testing (SAST, DAST, SCA, secrets scanning).
• Automate configuration management with Ansible or similar tools.
• Support cloud-native deployments and infrastructure modernization.
• Collaborate with software, cloud, cybersecurity teams, and SREs.
• Support vulnerability remediation and security hardening initiatives.
• Monitor pipeline performance, reliability, and security posture.

Skills

DevOps

DevSecOps

Cloud Engineering

SRE

CI/CD

Terraform/OpenTofu

Docker/Kubernetes

Security testing

GitHub/GitLab

Public Trust clearance

Education

Bachelor's degree in IT/CS/Cybersecurity or related field

Tools

Terraform

OpenTofu

Docker

Kubernetes

GitHub

GitLab

AWS

Azure

Jenkins

Ansible

Job description

Responsibilities

• Design, develop, and maintain secure CI/CD pipelines supporting enterprise applications
• Develop and manage Infrastructure as Code (IaC) solutions using Terraform, OpenTofu, or similar technologies
• Build and support containerized environments using Docker and Kubernetes
• Integrate security controls into development and deployment pipelines
• Implement and maintain automated security testing solutions, including SAST, DAST, dependency scanning, and secrets detection
• Automate configuration management and deployment processes using Ansible or similar tools
• Support cloud-native application deployments and infrastructure modernization efforts
• Collaborate with software developers, cloud engineers, cybersecurity teams, and system administrators
• Support vulnerability remediation and security hardening initiatives
• Monitor pipeline performance, reliability, and security posture
• Maintain technical documentation, architecture diagrams, and operational procedures
• Support compliance efforts aligned with federal cybersecurity requirements and industry best practices

Requirements

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or related field (or equivalent experience)
• 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, Site Reliability Engineering (SRE), or related disciplines
• Experience developing and maintaining CI/CD pipelines using GitHub Actions, GitLab CI/CD, Azure DevOps, Jenkins, or similar platforms
• Experience with Infrastructure as Code technologies such as Terraform or OpenTofu
• Experience with Docker and Kubernetes
• Experience implementing automated security testing within CI/CD pipelines
• Experience with source code management platforms such as GitHub or GitLab
• Experience with cloud environments including AWS and/or Microsoft Azure
• Experience automating deployments and configuration managementUnderstanding of secure software development practices
• Ability to obtain and maintain a Public Trust clearance

Preferred Qualifications

• Experience implementing SAST, DAST, Software Composition Analysis (SCA), secrets scanning, and policy-as-code solutions
• Experience with Ansible or similar automation platforms
• Experience supporting federal government environments
• Knowledge of NIST 800-53, FISMA, RMF, and Zero Trust principles
• Experience supporting container security and Kubernetes security controls
• Familiarity with CIS Benchmarks and cloud security best practices
• Relevant certifications such as AWS, Azure, Kubernetes (CKA/CKAD), Security+, CISSP, Terraform Associate, or similar