DevSecOps Engineer, Senior

Noblis; Reston (VA); On-site; USD 146,200 - 228,400; Full time

Benefits offered by this job

Health benefits

Professional development

Tuition assistance

Job summary

Noblis, based in Reston, Virginia, is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance. You'll integrate security throughout the DevOps lifecycle, ensuring security controls are embedded in software development.

This role entails designing CI/CD pipelines, implementing security best practices, and mentoring junior engineers. You should have a strong background in AWS, Kubernetes, and programming languages like Python. The compensation range is between $146,200 and $228,400 per year.

Qualifications

• Experience with CI/CD processes and DevSecOps principles.
• Active Top Secret/SCI clearance with Polygraph required.
• Familiarity with cloud-native security tools and practices.

Responsibilities

• Designing and optimizing CI/CD pipelines for secure delivery.
• Integrating security scanning into pipeline execution.
• Managing infrastructure as code (IaC) using tools like Terraform.

Skills

DevSecOps

CI/CD pipelines

Kubernetes

Terraform

Python

Security best practices

Education

Bachelor’s degree with 8 years of related experience

Master’s degree with 6 years of related experience

High School diploma/GED with 14 years of related experience

Tools

AWS

GitLab CI

Terraform

Ansible

Job description

Responsibilities

Noblis is seeking a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance and Polygraph to support mission-critical national security initiatives.

In this role, you will be responsible for integrating security throughout the DevOps lifecycle, ensuring that security principles and controls are embedded at every stage of software development and deployment. You will work closely with development, operations, and security teams to identify and mitigate risks, close security gaps, and foster a culture of shared responsibility for security across the organization.

Job Responsibilities

• Designing, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.
• Integrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.
• Developing and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
• Implementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
• Partnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.
• Operationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
• Translating security compliance requirements into automated security controls and audit-ready evidence.
• Ensuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.
• Acting as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.

Required Qualifications

The ideal candidate has hands‑on experience designing and implementing secure CI/CD pipelines, automating security controls, and securing Kubernetes-based environments. In addition, they will serve as a technical leader, providing guidance and mentorship to junior engineers while driving DevSecOps best practices across the team.

• Active Top Secret/SCI (TS/SCI) clearance with a current Polygraph.
• Bachelor’s degree with 8 years of related experience; OR Master’s degree with 6 years of related experience; OR Associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.
• Proficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).
• Familiarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).
• Skills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud‑native security tools and practices.
• Ability to identify security issues and vulnerabilities and develop effective solutions.
• Ability to distill technical complexities into actionable guidance for development teams.
• U.S. citizenship is required.

#HighlyCleared

Desired Qualifications

• AWS Certification, including AWS Certified DevOps Engineer or AWS Certified Solutions Architect Certification.
• Hands‑on experience implementing and managing policy enforcement tools such as OPA/Gatekeeper or Kyverno.
• Knowledge of SBOM generation, artifact signing (Cosign), and software supply chain provenance concepts.
• Familiarity with NIST SP 800‑171 or CMMC expectations.
• Strong analytical and problem‑solving skills, with the ability to diagnose and resolve complex security challenges across multiple technologies and environments.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, or to receive other benefits and privileges of employment, please contact us.

EEO is the Law | E-Verify | Right to Work

Total Rewards

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work‑life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category.

Compensation at Noblis

Compensation is determined by factors including education, certifications, knowledge, skills, competencies, experience, internal and external equity, location, clearance level, and contract‑specific affordability. The projected compensation range for this position is based on full‑time status. For part‑time or on‑call staff, compensation is proportionately adjusted based on hours worked.

Posted Salary Range

USD $146,200.00 - USD $228,400.00 /Yr.