DevSecOps Engineer (AWS, CI/CD)

Peregrine Advisors; Washington; Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with 100% match up to 4%

Unlimited paid time off

Sponsored professional certifications

Job summary

Peregrine Advisors in Washington, DC, is seeking a DevSecOps/Platform Engineer to own secure CI/CD pipelines, infrastructure-as-code, and security evidence for RMF authorization. You will operate in AWS or client-managed on-prem environments, delivering production-ready systems with automated testing, monitoring, and controlled deployments.

You will automate security and auditability, leverage containerization, and collaborate across teams to drive reliable, compliant software delivery in a

Qualifications

• 4+ years of DevSecOps or platform engineering experience.
• Hands-on CI/CD pipeline automation with security gates in AWS or comparable tools.
• Infrastructure-as-code with CloudFormation or Terraform; containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash; Git version control.
• Monitoring and logging in production environments.

Responsibilities

• Own secure delivery path for federal systems: CI/CD pipelines with security gates and RMF evidence.
• Implement infrastructure-as-code and containerization with security best practices.
• Build operational fabric: monitoring, logging, vulnerability scanning, automated health checks, and canary/blue-green deployments with rollback.

Skills

DevSecOps

Platform engineering

CI/CD automation

Security gate integration

AWS-native / cloud tooling

Scripting (Python/Bash)

Monitoring & logging

Git-based version control

Education

Bachelor’s Degree in Computer Science or related field

Tools

CodePipeline

CodeBuild

Terraform

CloudFormation

Docker

Kubernetes

HashiCorp Vault / Secrets Manager

GitHub Actions / GitLab CI

Job description

Peregrine Advisors is a firm founded on a simple conviction: the best solutions come from the people closest to the problem, given real ownership and the tools to deliver. We are a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission to deliver for client stakeholders and the US public, looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution.

Your first assignment

Your first assignment is to own a secure delivery path for federal systems: continuous integration and delivery (CI/CD) pipelines with security gates built in, infrastructure-as-code that makes environments reproducible, and the automation, monitoring, and evidence that support Risk Management Framework (RMF) authorization and continuous monitoring. You will work in Amazon Web Services (AWS) or in a client-managed, on-premises environment, and what you build will carry real systems into production. The work is real, hard, and it matters. It is also where you start, not the shape of your career here: we hire people, not seats, and we move our best to where the hardest problems are.

What you’ll build

• CI/CD pipelines with security built into the path: automated security testing (SAST, DAST, SCA), policy-as-code checks, and controlled promotion, so a release passes review because the pipeline enforced the required controls and produced evidence for review.
• The infrastructure under them, as code: reproducible environments with containerization and container-image scanning, least-privilege access, secrets management, and encryption as defaults rather than add-ons.
• The operational fabric: monitoring, logging, and vulnerability scanning; progressive delivery and low-downtime deployment strategies, including blue/green and canary deployments, with automated health checks and rollback; incident response; pipeline reliability and software-delivery performance metrics; and the evidence that supports an Authority to Operate (ATO) and continuous monitoring.
• In time, the firm itself: new capabilities, tools, and lines of business you help spin up.

Who you are

You treat security and reliability as part of the build, not a gate at the end, because in a federal environment they cannot be an afterthought. You automate what others do by hand and you leave an audit trail behind you. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• Hands-on CI/CD (AWS-native or comparable), infrastructure-as-code, and containerization for deploying real systems in AWS or in a client-managed, on-premises environment.
• The security craft around the pipeline: automated security testing (SAST, DAST, SCA), vulnerability scanning, secrets management, and least-privilege design.
• The scripting to automate what the tools do not: Python or Bash beyond pipeline configuration.
• The judgment to build where security and auditability are not optional.

What you’ll need

Sole United States citizenship and the ability to obtain a Public Trust determination are required for this initial engagement. This is a hybrid role based in the Washington, DC metropolitan area, and it requires commuting into DC regularly. Everything else, the years, the certifications, the specific tools, we ask in the application and get into during the interview.

What we offer

A high-performing team of developers, engineers, data scientists, architects, and strategists solving complex, real-world problems, with work that runs from strategy formulation to hands-on implementation. We develop people across roles and clients, with extensive onboarding and sponsored training and professional development. And Peregrine has been a Benefit Corporation from day one: public value is built into the work itself, not bolted on afterward. Work worth your best years.

What we commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.

We hire people who want to help build the firm, not just work at it. If that is you, apply.

Peregrine Advisors is an equal opportunity employer.

Peregrine exclusively works with OPEN Data Jobs to recruit our team.

• 4+ years of DevSecOps or platform engineering experience
• Bachelor’s Degree in Computer Science or related field
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI)
• Infrastructure-as-code (CloudFormation or Terraform) and containerization
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning
• Scripting in Python or Bash
• Git-based version control
• Monitoring and logging
• Basic proficiency in writing, PowerPoint, and Excel

Preferred

• Federal security experience: supporting FISMA compliance, implementing NIST SP 800-53 controls, and Authority to Operate (ATO) support
• Amazon Web Services certification
• Kubernetes
• Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable)
• Experience applying zero trust principles: identity-centered access, least privilege, and continuous verification
• Software supply-chain integrity practice: software bills of materials (SBOMs) and artifact signing
• Federal information technology experience
• Familiarity with AI-assisted developer tooling

Medical, dental, and vision with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) matched 100% up to 4% of salary, vesting immediately; unlimited paid time off; and sponsored professional certifications and continuing education.