Hybrid DevSecOps Engineer — AWS Cloud & Secure Pipelines

Jobsoid Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Jobsoid Inc. is seeking a Jr DevSecOps Engineer to design, build and run secure CI/CD pipelines on a federal cloud platform built on AWS. You will embed DevSecOps practices, automate security tests, and ensure compliance across the software delivery lifecycle.

The role includes IaC, security automation, and AI-assisted tooling integration. The position is hybrid with some on-site work; 3 days remote and 2 days onsite.

Qualifications

• 3+ years in DevOps or DevSecOps engineering.
• Hands-on with AWS cloud services and IaC.
• Experience implementing CI/CD pipelines and security automation.
• Experience scripting with Python or Bash.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services (CodePipeline, CodeBuild).
• Implement infrastructure-as-code with AWS CDK and CloudFormation.
• Integrate SAST, DAST, SCA and policy-as-code into CI/CD pipelines.
• Automate evidence collection for FedRAMP and NIST controls.
• Support automated environment provisioning and deployment strategies (blue/green, canary).
• Integrate AI-assisted development and DevSecOps tools for code scanning and pipeline automation.
• Monitor pipeline health and drive improvements in delivery metrics.
• Collaborate with development and security teams to implement secure SDLC practices.

Skills

DevSecOps

DevOps

AWS

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

IaC

CI/CD

Security automation

SAST

DAST

SCA

Policy as Code

FedRAMP compliance

NIST security controls

Blue/green deployments

Canary deployments

Python

Bash

AI-assisted DevSecOps tools

Pipeline monitoring

US work authorization

Public Trust clearance

Tools

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

Job description

Jobsoid Inc. is seeking a Jr DevSecOps Engineer to design, build and run secure CI/CD pipelines on a federal cloud platform built on AWS. You will embed DevSecOps practices, automate security tests, and ensure compliance across the software delivery lifecycle.

The role includes IaC, security automation, and AI-assisted tooling integration. The position is hybrid with some on-site work; 3 days remote and 2 days onsite.