DevSecOps Engineer (Python) — CI/CD for Federal Systems

Peregrine Advisors; Washington; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

401(k) match

Unlimited PTO

Professional certifications

Continuing education

Job summary

Peregrine Advisors seeks a DevSecOps professional to own secure CI/CD pipelines for federal systems. You will implement security gates, infrastructure-as-code, containerization, and evidence for RMF authorization, in AWS or client-managed on-prem environments.

You will automate security testing (SAST/DAST/SCA), manage secrets, and ensure least-privilege design. The role requires 4+ years of experience and a strong cloud/security toolkit, in a hybrid Washington, DC area setting.

Qualifications

• 4+ years of DevSecOps or platform engineering experience.
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI).
• Infrastructure-as-code (CloudFormation or Terraform) and containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• Basic proficiency in writing, PowerPoint, and Excel.

Responsibilities

• Own secure CI/CD pipelines with security gates and evidence for RMF authorization.
• Maintain infrastructure-as-code to create reproducible environments and enable containerization.
• Implement automated security testing and vulnerability scanning across pipelines.
• Provide monitoring, logging, and incident response capabilities for production systems.

Skills

DevSecOps

CI/CD

AWS

Infrastructure-as-code

Containerization

Python

Bash

Security testing

SAST

DAST

SCA

Vulnerability scanning

Git

Monitoring

Logging

Education

Bachelor’s Degree in Computer Science or related field

Tools

CodePipeline

CodeBuild

GitHub Actions

GitLab CI

CloudFormation

Terraform

Kubernetes

HashiCorp Vault

AWS Secrets Manager

Job description

Peregrine Advisors seeks a DevSecOps professional to own secure CI/CD pipelines for federal systems. You will implement security gates, infrastructure-as-code, containerization, and evidence for RMF authorization, in AWS or client-managed on-prem environments.

You will automate security testing (SAST/DAST/SCA), manage secrets, and ensure least-privilege design. The role requires 4+ years of experience and a strong cloud/security toolkit, in a hybrid Washington, DC area setting.