Federal DevSecOps Engineer: Secure CI/CD

Peregrine Advisors LLC; Washington (District of Columbia); On-site; USD 140,000 - 180,000; Full time

Job summary

OPEN Data Jobs is seeking a DevSecOps Engineer to design secure delivery pipelines and implement automations for federal-focused projects. You will build CI/CD paths, define deployment controls, and ensure evidence is available for ATO approvals.

The role bridges development, operations, and security with emphasis on secure, observable delivery. You will collaborate with cloud infrastructure teams and own the delivery path, integrating security throughout the software lifecycle and enabling

Qualifications

• Hands-on experience with source control, automated testing, CI/CD, and deployment automation.
• IaC experience with Terraform or AWS CloudFormation.
• Working knowledge of container security and software supply-chain controls.
• Experience with logging, monitoring, incident response, and recovery practices.
• Ability to translate NIST SP 800-53 control expectations into engineering work and evidence.

Responsibilities

• Design and implement CI/CD pipelines with tests, approvals, and deployments.
• Develop infrastructure-as-code modules and versioned deployment patterns.
• Manage container build, image scanning, and release processes for workloads.
• Establish observability and vulnerability-management workflows.
• Produce control evidence and traceability to support ATO and continuous monitoring.

Skills

CI/CD pipelines

Security evidence

Incident response

NIST controls

Cloud infrastructure

Tools

Terraform

AWS CloudFormation

Container security tooling

Job description

OPEN Data Jobs is seeking a DevSecOps Engineer to design secure delivery pipelines and implement automations for federal-focused projects. You will build CI/CD paths, define deployment controls, and ensure evidence is available for ATO approvals.

The role bridges development, operations, and security with emphasis on secure, observable delivery. You will collaborate with cloud infrastructure teams and own the delivery path, integrating security throughout the software lifecycle and enabling