DevSecOps Engineer (CI/CD and Release Automation)

OmniVista Consulting; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Job summary

OmniVista Consulting is seeking a DevSecOps Engineer to build and optimize automated delivery pipelines in Azure DevOps and Jenkins for a federal client. The role emphasizes security, accessibility, and release standards, with on-going collaboration with security and platform teams.

The candidate will work remote-first with periodic on-site visits in the Washington, DC metro area, must reside in DC/MD/VA, and hold a Public Trust Tier 2 clearance or higher.

Qualifications

• 5–7 years in DevOps/DevSecOps or pipeline ownership.
• Experience integrating security scanning into a delivery pipeline.

Responsibilities

• Build and maintain CI/CD pipelines in Azure DevOps and Jenkins.
• Consolidate and secure pipelines with automated gates and compliance checks.
• Configure branch policies, traceability from commit to release, and change control.

Skills

DevSecOps

Azure DevOps

Jenkins

GitHub Actions

AWS

Security tooling

Scripting

Education

Bachelor’s degree

Tools

Jenkins

Azure DevOps

GitHub Actions

GitLab CI

AWS GovCloud

Terraform

Ansible

Job description

DevSecOps Engineer (CI/CD and Release Automation)

Location Washington, DC metro area — remote with occasional on-site presence; local residency required

Clearance Public Trust Tier 2 (Moderate Background Investigation)

The DevSecOps Engineer is responsible for building and improving automated build, test, security, and release pipelines for a federal agency. The environment runs Azure DevOps alongside self-hosted Jenkins on AWS, an enterprise security scanning suite, and a container registry in government cloud. Limited automation has produced measurable technical debt, and reducing it is central to this role. The position treats the pipeline as the place where security, accessibility, and release standards are enforced rather than documented, and works closely with the solutions architect, platform engineer, test automation engineer, and agency information security staff.

Level: Mid-level — 5 to 7 years

Location: Remote, with occasional on-site presence in Washington, DC. Candidates must currently reside in the Washington, DC metropolitan area (DC, Maryland, or Northern Virginia). Relocation is not offered.

Clearance: Public Trust Tier 2 (Moderate Background Investigation). U.S. Citizen a Must. An active Tier 2 Public Trust or higher is strongly preferred.

Key Responsibilities

• Build and maintain pipelines in Azure DevOps and sustain existing Jenkins jobs on self-hosted AWS instances.
• Bring undocumented legacy automations under version control and documentation.
• Configure Git branch policies, protected branches, and required reviewers, with traceability from commit to work item to release.
• Progressively consolidate build orchestration where doing so reduces risk.

Security Automation and Compliance

• Integrate enterprise security scanning into the pipeline as automated gates with defined break-build thresholds and a documented exception path.
• Implement static analysis, dynamic application security testing, software composition analysis, container scanning, and infrastructure definition scanning.
• Track findings to closure by severity and age and report remediation against agreed windows.
• Support authorization activities including control evidence collection and continuous monitoring under an active Authority to Operate.
• Manage secrets outside source control.

Container and Artifact Management

• Publish and version container images to the AWS Elastic Container Service registry in government cloud.
• Scan images before promotion and promote the same immutable artifact through environments rather than rebuilding at each stage.
• Maintain artifact retention, versioning, and provenance records.

Release Engineering and Deployment

• Implement staged deployment with tested rollback and automated post-deployment verification.
• Retain per-release evidence: associated work items, source and configuration versions, test results, scan findings or approved exceptions, approvals, release notes, and rollback procedure.
• Maintain manual approval points where risk or government policy requires a human decision.
• Support emergency deployment procedures coordinated with the government under configuration management policy.

Metrics, Documentation, and Collaboration

• Establish and report lead time to change, deployment frequency, change failure rate, and mean time to restore, each with a baseline and target.
• Document pipeline architecture, environment promotion, approvals, deployment, and rollback procedures.
• Participate in change control and release readiness reviews.

Required Qualifications

Education

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.

Experience

• 5 to 7 years in DevOps, DevSecOps, build and release engineering, or software engineering with pipeline ownership, including building a pipeline from scratch or substantially rebuilding one.
• Demonstrated experience integrating security scanning into a delivery pipeline and interpreting the findings.
• Experience in a federal environment, including delivery under an active Authority to Operate.
• Experience reducing technical debt on an inherited codebase or pipeline.

Technical Skills

• Hands-on pipeline engineering in Azure DevOps and Jenkins; GitLab CI or GitHub Actions also relevant.
• Git branching strategy and code review workflow proficiency.
• Container engineering with Docker, including image build, scanning, and registry management on AWS Elastic Container Service or comparable.
• Scripting proficiency in PowerShell, Bash, or Python.
• Security tooling experience with SonarQube, StackHawk, Acunetix, Tenable, or Guardium.
• Infrastructure as Code with Ansible or Terraform.
• Cloud platform experience in AWS or Azure, ideally including GovCloud.

Certifications (Preferred)

• CompTIA Security+ or equivalent DoD 8570 certification
• ITIL Foundation v4
• Preference for automating a control rather than documenting an expectation.
• Sound judgment about when a manual approval gate is warranted.
• Strong documentation skills for pipeline and operational procedures.
• Ability to work in a high-security, compliance-driven environment.

Work Arrangement and Travel

This position is remote-first. Expect to be on site in Washington, DC a few days per month for customer meetings, quarterly planning, and team offsites, scheduled in advance. Standard business hours, Eastern time, Monday through Friday, with occasional scheduled maintenance windows planned in advance.

About OmniVista Consulting. OmniVista is an 8(a)-certified, minority-owned Economically Disadvantaged Woman-Owned Small Business delivering enterprise IT services to federal customers since 2013. This role supports a federal agency; the agency is identified during the interview process. OmniVista is an equal opportunity employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.