DevSecOps Engineer

Flex Staffing Resources; Washington (District of Columbia); Híbrido; USD 120.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health benefits

401(k) with match

Paid time off

Certification sponsorship

Hybrid work in DC area

Descripción de la vacante

Flex Staffing Resources is recruiting for a hybrid DevSecOps/Platform Engineer in the Washington, DC area to own delivery pipelines and secure production environments for federal systems.

The role emphasizes CI/CD automation, infrastructure as code, and automated security testing, with on-site expectations 1–2 days per week and a 4+ year track record in DevSecOps or platform engineering.

Formación

• Clearance: United States citizenship and ability to obtain Public Trust.
• Location: hybrid W-2 in Washington, DC metro; on-site 1–2 days/wk in DC.
• Experience: 4+ years in DevSecOps or platform engineering.
• Education: Bachelor's in a technical field.
• Technical Stack: CI/CD with AWS tools or GitHub/GitLab, IaC, Docker, Kubernetes, security testing, scripting (Python/Bash).
• Proficiency with Linux, networks, APIs, and web apps.

Responsabilidades

• Own delivery pipelines, automation, and environments for federal systems.
• Build CI/CD with security gates and controlled promotions.
• Define infrastructure as code and ensure reproducible environments.
• Automate security testing and vulnerability scanning.
• Provide evidence for RMF authorization and continuous monitoring.

Conocimientos

CI/CD automation

AWS native tools

Infrastructure as code

Docker

Kubernetes

Python/Bash scripting

Security testing

Git-based version control

Monitoring/logging

Networking and APIs

Educación

Bachelor's degree in CS/IT/cybersecurity/engineering

Herramientas

CodePipeline/CodeBuild

GitHub Actions

Terraform

CloudFormation

Descripción del empleo

Job Description

The Opportunity

We are exclusively recruiting for a rapidly growing AI and data innovation hub that helps the US government solve hard problems and deliver better outcomes. This organization is built differently: it is a certified Benefit Corporation and SBA 8(a) company focused specifically on AI and data for government. They believe that business success should create client value, social value, and real opportunity for their team. Clients describe this team’s support as “absolutely excellent,” and their work has earned top CPARS ratings, major agency awards, and recognition at global data competitions.

They put people first and always expect ownership. Trust and motivation come before competence. They are looking for someone who takes ownership, learns quickly, helps their teammates, and refuses to walk past a problem because it “belongs to someone else.” You are not joining just to fill a seat—you are joining to take ownership of a mission and help build a company.

Your First Project

In this role, your initial focus will be owning assigned delivery pipelines, automation, and the environments that carry federal systems into production. Depending on the specific assignment, you will:

• Build continuous integration and continuous delivery (CI/CD) pipelines with strict security gates and controlled promotion.
• Define the infrastructure beneath those pipelines as code, ensuring reproducible environments and least-privilege access.
• Automate security testing, vulnerability scanning, and secrets management across the entire delivery path.
• Build the monitoring and evidence required to support Risk Management Framework (RMF) authorization and continuous monitoring.
• You will deliver pipelines that enforce required controls and produce the necessary evidence for release reviews. You will automate manual steps out of the release path and build progressive delivery with automated health checks and rollbacks so that deploying code is no longer a stressful event.

(Note: This is just where you start. As the work evolves, you will learn new systems, take on greater responsibility, and be moved to where the hardest problems are.)

Who You Are

You build security and reliability into your work from the start because they cannot be afterthoughts in a federal environment. You automate what others do by hand and always leave a clear audit trail. You experiment, fail, learn, and repeat quickly. Above all, you would rather own an outcome than be handed a task.

What You Bring to the Table (Requirements)

• Clearance: United States citizenship and the ability to obtain a Public Trust determination are required.
• Location: This is a hybrid W-2 position based in the Washington, DC metropolitan area. The initial engagement is expected to be on-site in DC 1-2 days a week.
• Experience: 4+ years of dedicated DevSecOps or platform engineering experience.
• Education: Bachelor's degree in computer science, IT, cybersecurity, engineering, or a related technical discipline.
• Technical Stack & Skills: Hands-on CI/CD pipeline automation with security gates using AWS-native tools (CodePipeline, CodeBuild) or comparable tools (GitHub Actions, GitLab CI). Infrastructure as code (CloudFormation or Terraform). Hands-on Docker image creation and containerization. Experience deploying and managing Kubernetes clusters. Automated security testing (SAST, DAST, SCA) and vulnerability scanning. Scripting beyond basic configuration using Python or Bash. Proficiency with Linux OS and shell scripting. Strong understanding of networks, routing, load balancing, APIs, and web app architectures. Experience using AI-assisted development tools (e.g., GitHub Copilot) for code generation, review, and validation. Git-based version control, monitoring, and logging. Basic proficiency in writing, PowerPoint, and Excel.
• Bonus Points (Preferred) Federal security experience (FISMA compliance, NIST SP 800-53 controls, ATO support).
• Active AWS certifications.
• Secrets management experience (HashiCorp Vault, AWS Secrets Manager, etc.).
• Prior Federal IT experience.

Compensation & Benefits

Base Salary: $120,000 to $140,000 per year.

Health Benefits: Medical, dental, and vision with 100% of the employee premium paid and 50% of dependent premiums covered.

Additional Perks: Employer-paid life, accidental death, and short/long-term disability insurance; 401(k) with 100% match up to 4% (immediate vesting); unlimited paid time off; and sponsored certifications/continuing education (like DCAM and AWS).