DevSecOps Engineer

TekStream Solutions; Washington (District of Columbia); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental & vision insurance (em

Employer-paid life insurance

Unlimited PTO

401(k) with employer match

Sponsorship for certifications

Job summary

TekStream Solutions is seeking a DevSecOps/Platform Engineer to design secure, cloud-native AWS infrastructure and CI/CD pipelines. You will implement infrastructure as code with Terraform or CloudFormation, embed SAST/DAST/SCA, and manage Kubernetes and Docker-based workloads.

You will automate provisioning, maintain compliance evidence, and apply NIST SP 800-53 controls while leveraging Python/Bash and AI tools to raise quality and speed.

Qualifications

• 4+ years of experience in DevSecOps or platform engineering.
• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline.
• Hands-on experience creating security-gated CI/CD pipelines in AWS-native tools (CodeBuild, CodePipeline) or equivalents (GitLab CI, GitHub Actions).
• Background in standing up Kubernetes clusters and running them.
• Experience containerizing applications and creating Docker images, plus infrastructure as code with CloudFormation or Terraform.
• Vulnerability scanning and automated security testing (SAST, DAST, SCA).
• Proficiency in Python (Bash a plus) and Linux shell scripting.
• Strong networking knowledge including routing and load balancing, APIs, and web app architectures.
• Experience with Git versioning and logging/monitoring.
• Experience generating code and validating with AI-assisted tools (e.g., GitHub Copilot).
• Proficiency with PowerPoint and Excel.

Responsibilities

• Create secure, cloud-native infrastructure in AWS and develop CI/CD pipelines for deployment and maintenance.
• Capture infrastructure as code using Terraform or CloudFormation.
• Incorporate SAST, DAST, SCA, vulnerability scanning, and secrets management into the delivery path.
• Support workloads running on Docker and Kubernetes and troubleshoot infrastructure, networking, deployments, and security.
• Automate provisioning and releases so health checks and rollback are built in and compliance evidence is produced.
• Put NIST SP 800-53 controls in place and keep authorization and continuous monitoring evidence up to date.
• Use Python and Bash to automate work; leverage AI-assisted tools to improve quality.
• Improve logging/monitoring and ensure code quality throughout the pipeline.

Skills

DevSecOps

CI/CD pipelines

Cloud security

Python scripting

Kubernetes

Terraform

CloudFormation

NIST 800-53

AWS

Git/GitHub

SAST/DAST/SCA

Linux

Education

Bachelor's degree in CS/IT/Cybersecurity/Engineering

Tools

CodeBuild

CodePipeline

GitLab CI

GitHub Actions

Kubernetes

Docker

Terraform

CloudFormation

Python

Bash

Linux

HashiCorp Vault

Job description

The initial engagement requires United States citizenship

This is a 3 days hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.

Job Description:

• Create secure, cloud-native infrastructure in Amazon Web Services (AWS), develop the continuous integration and continuous delivery (CI/CD) pipelines used to deploy to that infrastructure, and maintain both.
• Capture that infrastructure in code, using Terraform or CloudFormation.
• Build security into the delivery path with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), vulnerability scanning, and secrets management.
• Support the workloads that run on Docker and Kubernetes, and run down faults in infrastructure, networking, deployments, and security.
• Script the repeatable operational work, and automate provisioning and releases so that health checks and rollback are built in and every run produces its compliance evidence.
• Put National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls in place, and keep authorization and continuous monitoring evidence up to date.
• Use Python, and Bash when appropriate, to automate the work; speed it up with AI-assisted tools; and improve the quality of everything that ships.

Requirements

• 4+ years of experience in DevSecOps or platform engineering
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Practical experience creating security-gated CI/CD pipelines in AWS-native tools (CodeBuild, CodePipeline) or in comparable tools (GitLab CI, GitHub Actions)
• A background in standing up Kubernetes clusters and running them
• Practical work containerizing applications and creating Docker images, plus infrastructure as code in CloudFormation or Terraform
• Vulnerability scanning, along with automated security testing like SAST, DAST, and SCA
• Ability to program and script in Python (Bash skills a plus)
• Proficiency working in Linux operating systems and writing shell scripts
• Strong knowledge of networking, including routing and load balancing, along with application programming interfaces and the way web applications are architected
• Using Git to track and manage versions
• A background in both logging and monitoring
• Experience generating code, reviewing it, and validating it with AI-assisted development tools, for example GitHub Copilot
• Proficiency in writing, PowerPoint, and Excel

Preferred

• Prior work in information technology for the federal government
• A background in secrets management using tools such as AWS Secrets Manager, HashiCorp Vault, or a similar product
• A federal security background covering NIST SP 800-53 control implementation, Authority to Operate (ATO) support, and support for Federal Information Security Modernization Act (FISMA) compliance
• Certification from AWS

• medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums
• employer-paid life, accidental death, and short-term and long-term disability insurance
• a 401(k) with an employer match of up to 4% of salary
• unlimited paid time off
• sponsored professional certifications and continuing education