DevSecOps Engineer (Mid-Level) – Hybrid Cloud & CI/CD

All Native Group, The Federal Services Division of Ho-Chunk Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Job summary

All Native Group, the Federal Services division of Ho-Chunk Inc., seeks a Mid-Level DevSecOps Engineer to augment the Congressional Budget Office’s engineering team and mature its hybrid-cloud infrastructure, CI/CD pipelines, and security-hardened delivery practices.

You will inherit established patterns and contribute to Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, and policy-as-code to enforce CIS/NIST baselines, support audits, and collaborate across teams.

Qualifications

• Minimum of 5 years of DevSecOps or infrastructure automation experience.
• Hands-on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning.
• Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and OPA/Rego.
• Federal or highly regulated environment experience preferred.

Responsibilities

• Maintain, extend, and refactor Terraform/OpenTofu codebases with remote state management.
• Develop and maintain Ansible playbooks and roles for configuration and deployment.
• Build and improve GitHub Actions workflows with security gates and policy-as-code validation.
• Support container delivery using Docker and Kubernetes, with image hardening and scans.
• Enforce CIS baselines and NIST compliance throughout delivery lifecycle.
• Work within change management and peer review workflows; no production changes without approval.
• Produce and maintain documentation, runbooks, and compliance artifacts.
• Participate in stand-ups, sprint planning, and knowledge transfer.

Skills

Infrastructure-as-Code

CI/CD pipeline engineering

Container hardening

Policy-as-code

Collaboration

Education

Bachelor’s degree in CS/IT or related field

Tools

Terraform/OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes/Helm

Security scanning tools (Trivy/Grype)

Job description

All Native Group, the Federal Services division of Ho-Chunk Inc., seeks a Mid-Level DevSecOps Engineer to augment the Congressional Budget Office’s engineering team and mature its hybrid-cloud infrastructure, CI/CD pipelines, and security-hardened delivery practices.

You will inherit established patterns and contribute to Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, and policy-as-code to enforce CIS/NIST baselines, support audits, and collaborate across teams.