DevSecOps Engineer — AWS CI/CD with AI-Driven Security

DUNBAR CONSULTING; Washington (District of Columbia); Hybrid; USD 75,000 - 90,000; Full time

Job summary

The DevSecOps Engineer at Dunbar Consulting builds and operates secure delivery pipelines for the platform using AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices across the SDLC. The ideal candidate has 3+ years of DevOps/DevSecOps experience with AWS, CDK/CloudFormation, and scripting (Python/Bash).

This role requires a U.S. citizenship, ability to obtain Public Trust Clearance, and a HYBRID schedule (2 days) in

Qualifications

• 3+ years of DevOps/DevSecOps engineering experience.
• Hands-on AWS and infrastructure-as-code (CDK/CloudFormation).
• Experience with CI/CD tooling and security automation.
• Scripting experience (Python, Bash, or similar).

Responsibilities

• Build and maintain CI/CD pipelines using AWS-native tooling (CodePipeline, CodeBuild).
• Implement infrastructure-as-code with AWS CDK/CloudFormation.
• Integrate security scanning (SAST/DAST/SCA) and policy-as-code into pipelines.
• Automate compliance evidence for FedRAMP/NIST controls.
• Support environment provisioning and deployment automation (blue/green, canary).
• Embed AI-assisted tooling for scanning, testing, and pipeline authoring.
• Monitor pipeline health and improve delivery metrics.
• Collaborate with the team on design and refinement.
• Identify technical issues and communicate risks early.
• Collaborate with project managers, product owners, and stakeholders.

Skills

DevSecOps experience

Strong communication

Independent work

Adaptable

Education

Computer Science or related field

Tools

AWS (CodePipeline/CodeBuild)

AWS CDK/CloudFormation

Python/Bash scripting

CI/CD tooling

Job description

The DevSecOps Engineer at Dunbar Consulting builds and operates secure delivery pipelines for the platform using AWS-native tooling. You will implement CI/CD, infrastructure-as-code, and security automation, embedding shift-left practices across the SDLC. The ideal candidate has 3+ years of DevOps/DevSecOps experience with AWS, CDK/CloudFormation, and scripting (Python/Bash).

This role requires a U.S. citizenship, ability to obtain Public Trust Clearance, and a HYBRID schedule (2 days) in