DevSecOps Engineer, AWS Secure Delivery

OpenTalent; Washington; On-site; USD 120,000 - 170,000; Full time

Job summary

Peregrine Advisors in the United States is seeking a delivery-focused engineer who will own CI/CD pipelines, automation, and environments for federal systems, from implementation through operation. You will work in AWS or client-managed on-prem environments, leveraging IaC, security testing, and RMF processes to deliver reliable systems.

The role emphasizes ownership, auditable practices, and compliant delivery that meets federal security requirements.

Qualifications

• Experience delivering federal systems with CI/CD and security gates.
• Proficiency in AWS or client-managed on-prem environments.
• Familiarity with RMF authorization and continuous monitoring.

Responsibilities

• Own assigned delivery pipelines, automation, and environments from implementation through operation.
• Implement infrastructure as code with reproducible environments and security controls.
• Ensure auditability, monitoring, and incident-response in production systems.

Skills

CI/CD

AWS

Security testing

Infrastructure as Code

RMF

Automation

Tools

SAST

DAST

SCA

Containerization

Job description

Peregrine Advisors is a firm founded on a simple conviction: the best solutions come from the people closest to the problem, given real ownership and the tools to deliver. We are a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission to deliver for client stakeholders and the US public, looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution.

In your first assignment, you will own assigned delivery pipelines, automation, and environments that carry federal systems into production. You will take responsibility for these components from implementation through operation, within the system's established architecture and security requirements. That means continuous integration and continuous delivery (CI/CD) pipelines with security gates built in, infrastructure as code that makes environments reproducible, and the automation, monitoring, and evidence that support Risk Management Framework (RMF) authorization and continuous monitoring. You will work in Amazon Web Services (AWS) or a client-managed, on-premises environment. What you build will carry real systems into production. The work is real and hard, and it matters. This first assignment is a starting point, not the shape of your career here. We hire people, not seats, and move our best to where the hardest problems are.

• Assigned CI/CD pipelines with security built into delivery through automated security testing, including static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA); policy-as-code checks; and controlled promotion. A release passes review because the pipeline enforced the required controls and produced the evidence for review.
• The infrastructure beneath those pipelines, defined as code, with reproducible environments, containerization and container-image scanning, least-privilege access, secrets management, and encryption built in as defaults.
• Monitoring, logging, vulnerability scanning, and incident-response practices that keep your assigned delivery components running.
• Progressive delivery and low-downtime deployment strategies, including blue/green and canary deployments with automated health checks and rollback.
• Pipeline reliability and software-delivery performance metrics, together with evidence supporting an Authority to Operate (ATO) and continuous monitoring.
• And over time, the firm itself, through the new capabilities, tools, and lines of business you help launch.

You build security and reliability into the work from the start because they cannot be afterthoughts in a federal environment. You automate what others do by hand and leave an audit trail. You experiment, learn from failure, and try again quickly. You would rather own an outcome than simply be given a task.