DevSecOps Engineer - 4173703

TCG; Washington (District of Columbia); Hybrid; USD 140,000 - 155,000; Full time

Benefits offered by this job

Health care

401K

Parental leave

Adoption assistance

Financial planning services

Student loan repayment assistance

Training budget

Job summary

TCG, an award-winning IT solutions provider to the Federal government, seeks a DevSecOps Engineer to join our project team. This is a full-time, primarily remote role with occasional on-site work and a requirement to live within commuting distance of Washington, D.C. U.S.

citizenship and background investigation are required. Responsibilities include designing, implementing, and securing CI/CD pipelines in AWS, deploying containerized applications with Kubernetes and Docker, and integrating

Qualifications

• Five or more years of DevSecOps experience with at least 3+ years managing AWS environments.
• Experience deploying containerized apps with Kubernetes and Docker.
• Proficiency in AWS security, baselines, and security policies to support a Zero Trust Architecture.
• Proficiency with CI/CD using GitLab and IaC with Terraform or CloudFormation.
• Hands-on with SAST/DAST and vulnerability management tools (SonarQube, Invicti, Tenable).
• Able to work in Agile environments.
• Experience writing Dockerfiles for Java or Angular apps.
• Experience standing up AWS/GitLab architectures in non-DOD federal space.

Responsibilities

• Design, implement, and maintain CI/CD pipelines in AWS using GitLab.
• Deploy and manage containerized apps with Kubernetes and Docker in AWS.
• Configure AWS environments with baselines and security policies.
• Implement security across the DevSecOps lifecycle including vulnerability management.
• Integrate SAST/DAST tools into CI/CD pipelines (SonarQube, Invicti).
• Ensure container security in Kubernetes and AWS.
• Collaborate with development teams to resolve vulnerabilities reported by Tenable.
• Automate deployment and configuration with Ansible across dev/test/prod.
• Implement and maintain monitoring/logging (Splunk or ELK) for uptime and health.
• Support platform operations: updates, patching, maintenance of AWS infrastructure.
• Review cloud architecture for scalability and improvements.

Skills

AWS

Kubernetes

Docker

CI/CD pipelines

GitLab

Security

SAST/DAST tools

Tenable

Terraform

CloudFormation

Ansible

Zero Trust Architecture

Education

Bachelor's degree in Information Systems, Computer Engineering, Computer Science or a related discipline

Tools

GitLab

Terraform

CloudFormation

Ansible

Splunk

ELK Stack

SonarQube

Invicti

Tenable

Job description

You've stumbled upon the rare B Corp government contractor! At TCG, we aim to prove that businesses can be good to their employees and responsible to their community while being profitable. We're an award-winning IT solutions provider to the Federal government seeking a DevSecOps Engineer to join our project team.

This Position Description (PD) is for an experienced DevSecOps Engineer to help design, develop, and implement solutions for one of our government customers.

U.S. citizenship is required for this role. In addition, the selected applicant must submit to a government background investigation and be favorably adjudicated before their first day.

This is a full-time position. It is primarily a remote role. However, the selected candidate may be required to be on site occasionally and therefore must live within commuting distance of Washington, D.C.

RESPONSIBILITIES:

• Design, implement, and maintain CI/CD pipelines in an AWS environment, leveraging tools like GitLab.
• Manage and deploy containerized applications using Kubernetes and Docker in an AWS environment.
• Configure and maintain AWS environments for various applications, including defining and applying baselines and security policies.
• Implement security best practices throughout the DevSecOps lifecycle, focusing on vulnerability management and secure configuration.
• Integrate SAST and DAST tools, such as Sonarqube and Invicti, into the CI/CD pipeline for analysis of code and container images.
• Ensure application security specifically for containers in the Kubernetes and AWS environments.
• Collaborate with development teams to resolve security vulnerabilities reported by tools like Tenable and track resolution progress.
• Automate deployment and configuration management tasks across development, test, and production environments, leveraging tools like Ansible.
• Implement and maintain monitoring and logging solutions (e.g. Splunk or ELK Stack) to ensure system uptime, performance, and application health.
• Support platform operations, including updates, patching, and system maintenance for the underlying AWS cloud infrastructure.
• Review and suggest improvements and changes to the current cloud architecture to aid in scaling cloud presence.

REQUIRED SKILLS:

• Five (5) plus years of experience in DevSecOps engineering, with at least 3+ years managing and maintaining AWS ecosystems.
• Expertise in managing and deploying containerized applications using Kubernetes and Docker.
• Proficiency with AWS cloud security, including configuring baselines and security policies to create a Zero Trust Architecture for tools such as encrypted S3 buckets, IAM role, and service/network logging.
• Proficiency in designing, implementing, and maintaining CI/CD pipelines using tools such as GitLab, and utilizing tools, such as Terraform or Cloud Formation, to implement an Infrastructure as Code methodology.
• Hands‑on experience with security scanning and analysis tools, including SAST/DAST (e.g., Sonarqube, Invicti) and vulnerability management (e.g., Tenable);
• Ability to work in an agile or iterative development environment.
• Experience authoring and debugging Dockerfiles for web applications, preferably for Docker images using Java or Angular.
• Experience standing up and managing an AWS/Gitlab architecture, preferably in a non‑DOD federal government space.

PREFERRED SKILLS:

• DevSecOps relevant certifications in Cloud platforms (AWS preferred).
• Experience ensuring application security for Java Spring Boot API containers.
• Practice working with regulatory, legal, or government data sets.

EDUCATION:

• Bachelor's degree in Information Systems, Computer Engineering, Computer Science or a related discipline.

TCG does not discriminate based on race, sex, color, religion, national origin, age, disability, caste, or veteran status.

Our B Corp mission is reflected in our benefits, including offerings like health care, 401K, parental leave, adoption assistance, financial planning services, student loan repayment assistance, and training budget. There's more, see for yourself.

TCG is recognized for treating employees well, in fact, in 2025 The Washington Post named TCG as a "Top Workplace" for the eleventh straight year based on how our employees feel about the company, the benefits TCG offers, and the work/life balance that our staff achieves. In the Washington Post Top Workplace survey, our CEO was ranked best by TCG employees' votes among all midsize companies.

Try us ... we'll make you happy.

Salary Range: $140,000 - $155,000