DevSecOps Engineer - Cloud, CI/CD & Security

Basecamp Consulting & Solutions LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Basecamp Consulting and Solutions is seeking a DevSecOps Engineer to augment the engineering team with security-forward automation in a hybrid cloud setup. The role focuses on extending Terraform/OpenTofu IaC, building Ansible playbooks for compliance, and creating GitHub Actions pipelines with security gates.

Responsibilities include Docker image hardening, Kubernetes/Helm orchestration with vulnerability scanning, and enforcing policy-as-code (OPA/Rego) in a regulated environment.

Qualifications

• Ability to obtain a Federal Security Clearance
• Terraform & OpenTofu modules and remote state/workspaces
• Ansible playbooks/roles with dynamic inventories
• GitHub Actions reusable workflows and security gates
• Docker authoring/hardening and Kubernetes manifests/Helm with vulnerability scanning
• SAST and secrets scanning tools; policy-as-code (OPA/Rego)
• Git workflows (branching, PR review, protected branches)
• Familiarity with Federal/regulatory requirements (NIST 800-53, FISMA) and AWS familiarity
• Python and Bash scripting for automation and tooling

Responsibilities

• Extend infrastructure automation in a hybrid cloud environment
• Maintain Terraform & OpenTofu IaC modular configs and remote state
• Develop Ansible playbooks/roles for CAC, patching, and compliance
• Build GitHub Actions CI/CD pipelines with security gates
• Manage Docker image hardening and Kubernetes/Helm orchestration with vulnerability scanning
• Integrate Shift-Left security and CIS/CBO baselines
• Adhere to change advisory, version control, and peer-review processes

Skills

Terraform & OpenTofu usage

Ansible playbooks

GitHub Actions

Docker & Kubernetes security

SAST & secrets scanning

Policy-as-code (OPA/Rego)

Git workflows

Python & Bash scripting

Compliance knowledge (NIST/FISMA)

Tools

Terraform

OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes

Semgrep

Checkov

tfsec

Gitleaks

Detect-Secrets

OPA/Rego

Job description

Basecamp Consulting and Solutions is seeking a DevSecOps Engineer to augment the engineering team with security-forward automation in a hybrid cloud setup. The role focuses on extending Terraform/OpenTofu IaC, building Ansible playbooks for compliance, and creating GitHub Actions pipelines with security gates.

Responsibilities include Docker image hardening, Kubernetes/Helm orchestration with vulnerability scanning, and enforcing policy-as-code (OPA/Rego) in a regulated environment.