DevSecOps Engineer - Cloud, Compliance & Automation

Fortreum; Leesburg (VA); On-site; USD 155,000 - 205,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K plan with a 4% match

Short-term disability

Long-term disability

AD&D and life insurance

Flex time off

Annual bonuses

Training stipends

Certification reimbursements

Access to 30,000+ free online courses

Personal cell phone allowance

New hire and home office stipend

Spot awards

Eleven paid holidays

Job summary

Fortreum is seeking a DevSecOps Engineer to deploy and operationalize the Kovr AI Platform with enterprise and federal customers. You will build integrations with DevSecOps toolchains, automate evidence collection, and configure compliance workflows for accelerated ATO across cloud, hybrid, and IC environments.

You will design CI/CD pipelines, manage AWS infrastructure with Terraform, and scale Kubernetes workloads, while aligning with NIST 800-53/ OSCAL compliance and security controls.

Qualifications

• 7+ years in DevOps, Platform/SRE with cloud engineering focus.
• Hands-on AWS infrastructure design using Terraform at scale.
• Kubernetes experience (EKS or similar) with Helm and GitOps.
• Direct FedRAMP/CMMC/NIST or DoD SRG exposure in production.
• Familiarity with OSCAL or machine-readable compliance formats.
• Pipeline security: SAST/DAST and IaC scanning integrated.
• Scripting in Python or Bash for automation.
• US Citizenship with ability to obtain Top Secret clearance.
• Comfort with fast-moving startup-within-a-company culture and DC metro area locality.

Responsibilities

• Design, build, and maintain CI/CD pipelines for rapid, secure delivery.
• Manage AWS infra via Terraform; implement reusable patterns.
• Administer containerized workloads with Kubernetes/EKS and ArgoCD.
• Apply security controls aligned to NIST 800-53 and OSCAL standards.
• Define observability: logging, metrics, alerts, SLOs for reliability.
• Integrate DevOps tools (GitHub, JIRA, Splunk, Snyk) into compliance workflows.
• Collaborate with engineering and compliance to maintain continuous authorization.
• Support evidence collection, control mapping, and audit readiness.
• Troubleshoot production issues; maintain docs, runbooks, architecture decisions.
• Represent infra/security in cross-functional discussions and customer talks.

Skills

DevSecOps

AWS

GitOps

Kubernetes

Terraform

Scripting

FedRAMP/CMMC familiarity

OSCAL familiarity

Security controls

Top Secret clearance readiness

US Citizenship

Tools

Terraform

Kubernetes (EKS)

Helm

ArgoCD

GitHub

JIRA

Splunk

Snyk

OCI/Cloud tooling

Job description

Fortreum is seeking a DevSecOps Engineer to deploy and operationalize the Kovr AI Platform with enterprise and federal customers. You will build integrations with DevSecOps toolchains, automate evidence collection, and configure compliance workflows for accelerated ATO across cloud, hybrid, and IC environments.

You will design CI/CD pipelines, manage AWS infrastructure with Terraform, and scale Kubernetes workloads, while aligning with NIST 800-53/ OSCAL compliance and security controls.