DevSecOps Engineer Role

Peregrine Advisors LLC; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

OPEN Data Jobs is seeking a DevSecOps Engineer to design secure delivery pipelines and implement automations for federal-focused projects. You will build CI/CD paths, define deployment controls, and ensure evidence is available for ATO approvals.

The role bridges development, operations, and security with emphasis on secure, observable delivery. You will collaborate with cloud infrastructure teams and own the delivery path, integrating security throughout the software lifecycle and enabling

Qualifications

• Hands-on experience with source control, automated testing, CI/CD, and deployment automation.
• IaC experience with Terraform or AWS CloudFormation.
• Working knowledge of container security and software supply-chain controls.
• Experience with logging, monitoring, incident response, and recovery practices.
• Ability to translate NIST SP 800-53 control expectations into engineering work and evidence.

Responsibilities

• Design and implement CI/CD pipelines with tests, approvals, and deployments.
• Develop infrastructure-as-code modules and versioned deployment patterns.
• Manage container build, image scanning, and release processes for workloads.
• Establish observability and vulnerability-management workflows.
• Produce control evidence and traceability to support ATO and continuous monitoring.

Skills

CI/CD pipelines

Security evidence

Incident response

NIST controls

Cloud infrastructure

Tools

Terraform

AWS CloudFormation

Container security tooling

Job description

The work

DevSecOps Engineers make secure delivery repeatable. They design the CI/CD paths, deployment controls, and operational feedback loops that carry software from a change in source code to a running service. In federal environments, that work also includes assembling and maintaining security evidence for an Authority to Operate (ATO), the formal decision to allow a system to operate at an accepted level of risk.

Description

The role works across development, operations, and security. DevSecOps Engineers automate build, test, deployment, configuration, vulnerability management, logging, and recovery practices so teams can release with visible controls and usable evidence. They partner with Cloud Infrastructure Engineers who provide the underlying platform, while they own the delivery path and its security integration.

What You'll Build

• CI/CD pipelines that run tests, security checks, approvals, and deployments consistently.
• Infrastructure-as-code modules and deployment patterns that are versioned and reviewable.
• Container build, image-scanning, and release processes for application workloads.
• Observability and vulnerability-management workflows that turn operating signals into action.
• Control evidence and traceability that support authorization, assessment, and continuous monitoring.

Who You Are

You treat security, reliability, and delivery speed as one engineering problem. You look for manual deployment steps, unreviewed configuration changes, and missing evidence because each makes a system harder to operate and defend.

You can work across specialties without blurring accountability. You understand enough application engineering, cloud infrastructure, and security practice to create a dependable delivery system, communicate tradeoffs clearly, and help teams use it.

What You Bring

• Hands-on experience with source control, automated testing, CI/CD, and deployment automation.
• Infrastructure-as-code experience with tools such as Terraform, Amazon Web Services CloudFormation, or comparable platforms.
• Working knowledge of container security, software supply-chain controls, and vulnerability remediation.
• Experience with logging, monitoring, incident response, and recovery practices.
• Ability to translate National Institute of Standards and Technology (NIST) Special Publication 800-53 control expectations into engineering work and evidence.

About OPEN Data Jobs

OPEN Data Jobs connects AI, data, and software professionals with critical roles, primarily in the federal sector. Registering with ODJ can put your profile in view for multiple positions across several clients.

Requirements

Some openings may ask for experience supporting an ATO or working with the Risk Management Framework, a structured NIST process for managing security risk. Others may focus on a specific cloud, orchestration platform, programming language, or delivery toolchain.

Openings with production accountability may require demonstrated work with on‑call operations, incident response, security assessments, or regulated release controls. Requirements should distinguish responsibility for the delivery pipeline from responsibility for the underlying cloud environment or independent security assessment.

Benefits

Compensation, benefits, work location, and employment terms are set for each specific opening and will be stated with that opening.