Hybrid DevSecOps Engineer: Secure CI/CD on AWS

Peregrine Advisors; Washington; Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) matched up to 4%

Unlimited paid time off

Sponsored professional certifications

Job summary

Peregrine Advisors in the Washington, DC area seeks a motivated engineer to help build and operate secure delivery pipelines for federal systems. You will design and maintain CI/CD pipelines, write infrastructure‑as‑code on AWS, containerize services, and ensure automated security testing and auditable deployments.

This role is hybrid and hands‑on, emphasizing collaboration, rapid learning, and shifting security left.

Qualifications

• A foundation in scripting, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.
• The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.
• The communication to say clearly what you have done, what you are stuck on, and what you need.
• The precision to work where accuracy and auditability are not optional.

Responsibilities

• Build and maintain CI/CD pipelines with blue/green and canary deployments.
• Write infrastructure-as-code on AWS from templates.
• Containerize services; keep images patched, scanned, and small.
• Wire monitoring, logging, and vulnerability scanning for observability and security.
• Help assemble security evidence for Authority to Operate (ATO).
• Contribute to shift-left security and AI-assisted tooling.

Skills

Scripting

Cloud fundamentals

Delivery automation

Security testing

Version control

Automated testing

Code review

Secure configuration

Communication

Auditability

Tools

AWS

CI/CD

SAST/DAST/SCA

Job description

Peregrine Advisors in the Washington, DC area seeks a motivated engineer to help build and operate secure delivery pipelines for federal systems. You will design and maintain CI/CD pipelines, write infrastructure‑as‑code on AWS, containerize services, and ensure automated security testing and auditable deployments.

This role is hybrid and hands‑on, emphasizing collaboration, rapid learning, and shifting security left.