DevSecOps Engineer (Part-Time)

TechSur Solutions, LLC; Reston (VA); On-site; USD 62,000 - 69,000; Part time

Job summary

TechSurSolutions seeks a part-time DevSecOps Engineer to build automated CI/CD pipelines across multi-clouds, integrating SAST, DAST, SCA, and container scanning for a federal customer. You will craft IaC modules (Terraform, Bicep, CloudFormation) and support policy-as-code checks, while enabling blue-green and canary deployments.

You will collaborate with cloud, security, and operations teams to accelerate delivery without compromising compliance and governance.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.
• At least 5 years of experience developing and maintaining CI/CD pipelines and automating deployment processes.
• Hands-on Infrastructure-as-Code experience with Terraform or an equivalent tool.
• Experience integrating automated security testing (SAST, SCA, DAST, or container scanning) into pipelines.
• Proficiency with Git and at least one CI/CD platform (GitLab CI, GitHub Actions, Azure DevOps, or Jenkins).
• Scripting skills in Python, Bash, or PowerShell.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design, build, and maintain multi-stage CI/CD pipelines (build, test, scan, deploy) for infrastructure and customer applications.
• Integrate security testing into pipelines: SAST, SCA, DAST, and container scanning with gates that fail builds on high-severity findings.
• Develop reusable Infrastructure-as-Code modules (Terraform, Bicep, CloudFormation) and Ansible playbooks.
• Implement GitOps practices (e.g., Argo CD) and policy-as-code checks (OPA/Rego, Checkov).
• Set up blue‑green and canary deployment strategies with automated health checks and rollback.
• Use CSP-native DevOps services (AWS CodePipeline/CodeDeploy, Azure DevOps, GCP Cloud Build/Cloud Deploy, OCI DevOps) alongside third‑party tools.
• Integrate pipelines with ServiceNow to automate change requests and risk‑based approvals.
• Document pipeline patterns and coach teams on DevSecOps practices.

Skills

CI/CD pipelines

Security testing integration

Git

Python

Education

Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field

Tools

Terraform

Ansible

CloudFormation

Bicep

Argo CD

Checkov

Snyk

OWASP ZAP

Trivy

Job description

• Active Government Security Clearance: No
• Compensation: USD 45 - USD 50 - hourly

Company Description

TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.

Job Description

TechSur is seeking a DevSecOps Engineer to build the automated pipelines behind a federal customer's multi-cloud platform. This is a part-time (0.5 FTE, about 20 hours per week) role. You will develop CI/CD pipelines that provision infrastructure and deploy applications consistently across AWS, Azure, Google Cloud, and Oracle Cloud, with security testing built into every stage.

Working closely with cloud engineers, security specialists, and customer development and operations teams, you will make Infrastructure-as-Code the standard way environments are built and changed. You will also help the team ship faster without giving up control or compliance.

Key Responsibilities

• Design, build, and maintain multi-stage CI/CD pipelines (build, test, scan, deploy) for infrastructure and customer applications.
• Integrate security testing into pipelines: SAST (SonarQube, Checkmarx), software composition analysis (Snyk, Black Duck), DAST (OWASP ZAP), and container scanning (Trivy, Aqua), with gates that fail builds on high‑severity findings.
• Develop reusable Infrastructure-as-Code modules (Terraform, Bicep, CloudFormation) and Ansible playbooks for configuration management.
• Implement GitOps practices (e.g., Argo CD) and policy-as-code checks (OPA/Rego, Checkov) to prevent configuration and IaC drift.
• Set up blue‑green and canary deployment strategies with automated health checks and rollback.
• Use CSP-native DevOps services (AWS CodePipeline/CodeDeploy, Azure DevOps, GCP Cloud Build/Cloud Deploy, OCI DevOps) alongside third‑party tools.
• Integrate pipelines with ServiceNow to automate change requests and risk‑based approvals.
• Document pipeline patterns and coach development and operations teams on DevSecOps practices.

Qualifications

Required Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.
• At least 5 years of experience developing and maintaining CI/CD pipelines and automating deployment processes.
• Hands‑on Infrastructure-as-Code experience with Terraform or an equivalent tool.
• Experience integrating automated security testing (SAST, SCA, DAST, or container scanning) into pipelines.
• Proficiency with Git and at least one CI/CD platform (GitLab CI, GitHub Actions, Azure DevOps, or Jenkins).
• Scripting skills in Python, Bash, or PowerShell.
• Ability to work effectively with development and operations teams.
• Ability to obtain and maintain the background investigation required by the federal customer.

Preferred Qualifications

• Experience with containers and Kubernetes (EKS, AKS, GKE, or OKE).
• Experience with GitOps tools (Argo CD, Flux) and policy-as-code.
• Experience delivering pipelines in federal environments aligned to NIST SP 800‑53.
• Prior support of a civilian federal agency.

Additional Information

All your information will be kept confidential according to EEO guidelines.