Jr DevSecOps Engineer

AmeriSOURCE Consulting, Inc.; Washington (District of Columbia); Hybrid; USD 85,000 - 110,000; Full time

Job summary

AmeriSOURCE Consulting, Inc. is seeking a Jr DevSecOps Engineer to design, build, and operate secure software delivery pipelines on a federal cloud platform. You will embed security into CI/CD, automate infrastructure, and work with security teams to meet federal requirements.

The role emphasizes AWS-native tooling, IaC, and automated testing while enabling blue/green and canary deployments. Hybrid work with onsite and remote days applies.

Qualifications

• 3+ years of DevOps/DevSecOps experience.
• Hands-on AWS cloud services and infrastructure-as-code.
• Experience implementing CI/CD pipelines and security automation.
• Experience scripting with Python or Bash.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services.
• Implement infrastructure-as-code with AWS CDK and CloudFormation.
• Integrate SAST, DAST, and SCA into CI/CD pipelines.
• Automate evidence collection for FedRAMP and NIST controls.
• Support automated provisioning and deployment strategies (blue/green, canary).
• Incorporate AI-assisted DevSecOps tools for code scanning and pipeline automation.
• Monitor pipeline health and drive delivery metric improvements.
• Collaborate with dev and security teams to enforce secure SDLC practices.

Skills

DevSecOps

DevOps

CI/CD

Security automation

Python

Bash

U.S. work authorization

Public Trust clearance

Tools

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

Infrastructure as Code

SAST

DAST

SCA

Policy as Code

FedRAMP

NIST controls

Blue/green deployments

Canary deployments

Job description

We are building a team for one of the U.S. Federal Government's largest technology modernization programs, underpinning the U.S. capital markets.

Built on AWS and leveraging an AI-powered software engineering platform, this program offers a unique opportunity to gain hands-on experience with next-generation AI, Agentic AI, cloud technologies, and AI-driven engineering.

If you are looking for technically challenging work, exceptional learning, and a résumé-defining opportunity with national impact, I would love to connect.

Job Title

Jr DevSecOps Engineer

Position Type

Full-Time

Location:

Hybrid (2 days onsite)

Days Remote

3 days remote

Position Summary

The DevSecOps Engineer designs, builds, and operates secure software delivery pipelines for a large-scale federal cloud platform built on AWS. This role is responsible for implementing CI/CD pipelines, infrastructure-as-code, security automation, and deployment automation while embedding DevSecOps and shift-left security practices throughout the software development lifecycle. Working closely with developers, architects, and security teams, the DevSecOps Engineer helps deliver secure, compliant, and highly automated software releases that meet federal security and compliance requirements.

Key Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services, including AWS CodePipeline and AWS CodeBuild.
• Implement and maintain infrastructure-as-code using AWS CDK and AWS CloudFormation.
• Integrate security scanning capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and policy-as-code into CI/CD pipelines.
• Automate compliance evidence collection to support FedRAMP and NIST security controls.
• Support automated environment provisioning and deployment strategies, including blue/green and canary deployments.
• Integrate AI-assisted development and DevSecOps tools for code scanning, testing, and pipeline automation.
• Monitor CI/CD pipeline health, reliability, and performance while driving continuous improvements in delivery metrics.
• Collaborate with development and security teams to implement secure software delivery best practices across the software development lifecycle.

Minimum Experience

• 3+ years of DevOps or DevSecOps engineering experience.
• Hands‑on experience with AWS cloud services and infrastructure-as-code.
• Experience implementing CI/CD pipelines and security automation.
• Experience developing automation scripts using Python, Bash, or similar scripting languages.

Mandatory Skills

• DevSecOps.
• DevOps.
• AWS.
• AWS CodePipeline.
• AWS CodeBuild.
• AWS CDK.
• AWS CloudFormation.
• Infrastructure as Code (IaC).
• CI/CD.
• Security automation.
• Static Application Security Testing (SAST).
• Dynamic Application Security Testing (DAST).
• Software Composition Analysis (SCA).
• Policy as Code.
• FedRAMP compliance.
• NIST security controls.
• Blue/green deployments.
• Canary deployments.
• Python, Bash, or similar scripting languages.
• AI-assisted DevSecOps tools.
• Pipeline monitoring and optimization.
• U.S. work authorization.
• Ability to obtain a Public Trust clearance.

Nice-to-Have Skills

• AWS DevOps Engineer or AWS Security certification.
• FedRAMP implementation experience.
• NIST compliance experience.
• Experience using AI-assisted DevSecOps and software engineering tools.

Degrees and Certifications

Required

• Degree requirements were not specified in the original job description.

Preferred

• AWS DevOps Engineer certification.
• AWS Security certification.