DevSecOps Engineer, AWS

Jobtailor; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

AWS Certification

Job summary

Jobtailor seeks a DevSecOps/Platform Engineer to secure federal delivery pipelines in Washington, DC. You will own secure CI/CD paths, implement policy-as-code, and create reproducible IaC with containerization, least privilege, and encryption.

You’ll monitor deployment health, security gates, and deliver evidence for ATO and continuous monitoring. Required: 4+ years in DevSecOps or platform engineering, a CS-related degree, hands-on CI/CD automation (CodePipeline/CodeBuild or GitHub Actions),

Qualifications

• 4+ years of DevSecOps or platform engineering experience.
• Bachelor's degree in Computer Science or related field.
• Hands-on CI/CD pipeline automation with security gates and AWS-native tools or equivalents.
• Infrastructure-as-code and containerization.
• Automated security testing and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• US citizenship; ability to obtain Public Trust.
• Ability to commute into Washington, DC regularly.
• Preferred: federal security experience and AWS/Kubernetes/secrets management familiarity.

Responsibilities

• Own a secure delivery path for federal systems.
• Build CI/CD pipelines with automated security testing, policy-as-code checks, controlled promotion, and review evidence.
• Create reproducible infrastructure-as-code environments with containerization, image scanning, least-privilege access, secrets management, and encryption.
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback.
• Respond to incidents and track pipeline reliability and software-delivery performance metrics.
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring.
• Work in AWS or client-managed on-premises environments.
• Help develop new capabilities, tools, and lines of business.

Skills

DevSecOps

CI/CD Automation

Infrastructure as Code

Security Testing

Python Scripting

Bash Scripting

Git Version Control

Monitoring & Logging

AWS Tools

Zero Trust

Education

Bachelor's Degree in CS or related field

Tools

AWS

CodePipeline

CodeBuild

GitHub Actions

GitLab CI

Terraform

CloudFormation

Kubernetes

HashiCorp Vault

AWS Secrets Manager

Job description

• Own a secure delivery path for federal systems


• Build CI/CD pipelines with automated security testing, policy-as-code checks, controlled promotion, and review evidence


• Create reproducible infrastructure-as-code environments with containerization, image scanning, least-privilege access, secrets management, and encryption


• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback


• Respond to incidents and track pipeline reliability and software-delivery performance metrics


• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring


• Work in AWS or client-managed on-premises environments


• Help develop new capabilities, tools, and lines of business

Requirements

• 4+ years of DevSecOps or platform engineering experience


• Bachelor's Degree in Computer Science or related field


• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI)


• Infrastructure-as-code (CloudFormation or Terraform) and containerization


• Automated security testing (SAST, DAST, SCA) and vulnerability scanning


• Scripting in Python or Bash


• Git-based version control


• Monitoring and logging


• Basic proficiency in writing, PowerPoint, and Excel


• Sole United States citizenship


• Ability to obtain a Public Trust determination


• Ability to commute into Washington, DC regularly


• Preferred: Federal security experience supporting FISMA compliance, implementing NIST SP 800-53 controls, and ATO support


• Preferred: Amazon Web Services certification


• Preferred: Kubernetes


• Preferred: Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable)


• Preferred: Experience applying zero trust principles


• Preferred: Software supply-chain integrity practices including SBOMs and artifact signing


• Preferred: Federal information technology experience


• Preferred: Familiarity with AI-assisted developer tooling

Core Competencies

Demonstrates expertise in building and managing CI/CD pipelines with a focus on security automation, infrastructure-as-code, and vulnerability management. Proficient in AWS environments and federal compliance standards, with a strong foundation in scripting and monitoring.

Highest-signal resume keywords

• DevSecOps Experience


• CI/CD Pipeline Automation


• Infrastructure-as-Code


• Automated Security Testing


• AWS Native Tools

Hard Skills

• CI/CD Pipeline Automation


• Infrastructure-as-Code


• Automated Security Testing


• Scripting in Python


• Scripting in Bash


• Monitoring and Logging


• Vulnerability Scanning


• Git-Based Version Control


• Containerization


• Secrets Management

Soft Skills

• Communication


• Problem-Solving


• Collaboration

Certifications & Qualifications

• Amazon Web Services Certification

Industry Keywords

• Federal Security Experience


• FISMA Compliance


• NIST SP 800-53 Controls


• Authority to Operate (ATO)


• Zero Trust Principles


• Software Supply-Chain Integrity


• SBOMs


• Artifact Signing


• Federal Information Technology Experience


• AI-Assisted Developer Tooling

Tools & Technologies

• AWS


• CloudFormation


• Terraform


• CodePipeline


• CodeBuild


• GitHub Actions


• GitLab CI


• HashiCorp Vault


• AWS Secrets Manager


• Kubernetes