DevSecOps Engineer: Secure CI/CD, Cloud & Automation

All Native Group; Washington (District of Columbia); On-site; USD 120,000 - 165,000; Full time

Job summary

All Native Group is seeking a Mid-Level DevSecOps Engineer to augment the Congressional Budget Office's engineering team and mature its automation, CI/CD, and security-driven delivery practices. You will work in a production, hybrid-cloud environment and extend existing patterns while adhering to change control.

The role emphasizes infrastructure as code, container orchestration, and policy-based security across the delivery lifecycle, with emphasis on compliance and documentation.

Qualifications

• 5+ years of DevSecOps or infrastructure automation experience.
• Hands-on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning.
• Experience with SAST tooling, secrets scanning, and policy tooling (OPA/Rego).
• Federal or highly regulated environment experience preferred.

Responsibilities

• Maintain, extend, and refactor Terraform/OpenTofu codebases and modular configurations.
• Develop and maintain Ansible playbooks for configuration, compliance, and deployment.
• Build and improve GitHub Actions workflows with security gates (SAST, secret scanning).
• Support container delivery using Docker and Kubernetes; create hardened images and Helm charts.
• Enforce CIS benchmarks and NIST 800-53 in the delivery lifecycle; support audits.
• Follow change advisory process; document runbooks and compliance artifacts.
• Participate in stand-ups, sprints, and knowledge transfer with staff.

Skills

IaC/Configuration-as-Code

CI/CD with security gates

Container hardening

Policy-as-code & secrets

Collaborative engineering

Education

Bachelor's degree in CS/IT or related field

Tools

Terraform

OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes

Helm

Trivy/Grype

Semgrep/Checkov

Job description

All Native Group is seeking a Mid-Level DevSecOps Engineer to augment the Congressional Budget Office's engineering team and mature its automation, CI/CD, and security-driven delivery practices. You will work in a production, hybrid-cloud environment and extend existing patterns while adhering to change control.

The role emphasizes infrastructure as code, container orchestration, and policy-based security across the delivery lifecycle, with emphasis on compliance and documentation.