DevSecOps Engineer: Secure Multi-Cloud & FedRAMP

The Phoenix Group; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

The Phoenix Group in Arlington, VA seeks a SecDevOps Engineer to design and automate secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP. You will implement Zero Trust architectures, manage credentials with Vault, and integrate identity providers to enforce strict least-privilege controls.

You will build secure deployment workflows, embed SAST/SCA, and support FedRAMP compliance, monitoring, and incident response across multi-cloud environments.

Qualifications

• 1–2 years of professional SecDevOps, Cloud Security Engineering, Platform Engineering, or DevSecOps experience.
• Hands-on with at least one major hyperscaler (AWS preferred); working knowledge of Azure and GCP.
• Advanced skills in Infrastructure as Code (Terraform, Ansible, CloudFormation) and scripting languages (Python, Bash, PowerShell).
• Proven experience managing enterprise identity/access solutions (Okta, Entra ID) and secrets management platforms (HashiCorp Vault, AWS KMS, Azure Key Vault).
• Familiarity with security tooling such as endpoint protection (EDR), CSPM, and vulnerability scanners.
• Strong understanding of containerization and orchestration platforms (Docker, Kubernetes).
• Practical knowledge of FedRAMP, NIST 800-53, SOC 2 frameworks, or comparable compliance standards.

Responsibilities

• Support and operate Zero Trust Network Access (ZTNA) architectures, including app connectors, privileged remote access, and private application boundaries, utilizing tools like Zscaler ZPA.
• Manage privileged credentials, API tokens, and secret lifecycle workflows using HashiCorp Vault, establishing automated credential rotation and lifecycle management.
• Integrate federated identity providers (Okta, Azure AD / Entra ID, AWS IAM Identity Center) and support multi-cloud identity migration.
• Enforce least-privilege access policies across cloud environments, automating role-based access controls and credential rotation.
• Build, automate, and maintain multi-tenant cloud infrastructure across AWS, Azure, and GCP using Terraform as primary, Ansible, CloudFormation.
• Automate cloud provisioning, configuration management, and application deployment through secure CI/CD pipelines and GitOps processes (ArgoCD, Helm).
• Configure and manage cloud networking, IAM roles, and network permissions aligning with FedRAMP IL4 controls.
• Develop and uphold secure CI/CD pipelines using GitHub Actions, GitLab CI, Azure DevOps, or Jenkins, integrating Policy-as-Code frameworks (OPA, HashiCorp Sentinel, Azure Policy).
• Embed SAST, SCA, and container vulnerability scanning into deployment workflows.
• Build, deploy, and troubleshoot containerized workloads in Kubernetes environments (EKS, AKS, GKE) using Helm, ArgoCD, or Kustomize.
• Support FedRAMP continuous monitoring (ConMon), incident management, POA&M tracking, and remediation activities.
• Automate audit evidence collection and compliance reporting for controls like CM-2, CM-6, AU-2, SC-.
• Participate in enterprise change management processes, including documentation and technical review cycles (ServiceNow).
• Maintain centralized observability infrastructure using Grafana, Prometheus, CloudWatch, and other cloud-native tooling.
• Define, monitor, and report on SLIs/SLOs for critical cloud security services.
• Lead incident response efforts, on-call troubleshooting, root cause analysis, and rapid resolution for security and operational issues.

Skills

Zero Trust

CI/CD automation

Cloud security

Infrastructure as Code

GitOps

Tools

Terraform

Ansible

CloudFormation

HashiCorp Vault

Okta

Job description

The Phoenix Group in Arlington, VA seeks a SecDevOps Engineer to design and automate secure cloud infrastructure and CI/CD pipelines across AWS, Azure, and GCP. You will implement Zero Trust architectures, manage credentials with Vault, and integrate identity providers to enforce strict least-privilege controls.

You will build secure deployment workflows, embed SAST/SCA, and support FedRAMP compliance, monitoring, and incident response across multi-cloud environments.