Federal DevSecOps Engineer: Secure CI/CD & Infra

Jobtailor; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking a DevSecOps/Platform Engineer to own secure delivery paths for federal systems in AWS or client environments. You will build CI/CD pipelines with automated security gates and policy checks, and create reproducible IaC with containerized environments and secrets management.

The role requires 4+ years in DevSecOps, a CS-related degree, and hands-on scripting with Python/Bash, plus cloud automation using CodePipeline/CodeBuild or GitHub/GitLab actions.

Qualifications

• 4+ years of DevSecOps or platform engineering experience.

Responsibilities

• Own a secure delivery path for federal systems.
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, controlled promotion, and review evidence
• Build reproducible infrastructure-as-code environments with containerization, container-image scanning, least-privilege access, secrets management, and encryption
• Implement monitoring, logging, vulnerability scanning, progressive delivery, blue/green and canary deployments, automated health checks, and rollback
• Handle incident response, pipeline reliability, and software-delivery performance metrics
• Produce evidence supporting Authority to Operate (ATO) authorization and continuous monitoring
• Work in Amazon Web Services or client-managed on-premises environments
• Help create new capabilities, tools, and lines of business

Skills

CI/CD automation

Infrastructure as Code

Automated security testing

Python scripting

Bash scripting

Git-based version control

Monitoring & logging

Vulnerability scanning

Containerization

Secrets management

Education

Bachelor’s degree in Computer Science or related field

Tools

AWS

CloudFormation

Terraform

Kubernetes

HashiCorp Vault

AWS Secrets Manager

GitHub Actions

GitLab CI

CodePipeline

CodeBuild

Job description

Jobtailor is seeking a DevSecOps/Platform Engineer to own secure delivery paths for federal systems in AWS or client environments. You will build CI/CD pipelines with automated security gates and policy checks, and create reproducible IaC with containerized environments and secrets management.

The role requires 4+ years in DevSecOps, a CS-related degree, and hands-on scripting with Python/Bash, plus cloud automation using CodePipeline/CodeBuild or GitHub/GitLab actions.