Jr DevSecOps Engineer

Jobsoid Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Jobsoid Inc. is seeking a Jr DevSecOps Engineer to design, build and run secure CI/CD pipelines on a federal cloud platform built on AWS. You will embed DevSecOps practices, automate security tests, and ensure compliance across the software delivery lifecycle.

The role includes IaC, security automation, and AI-assisted tooling integration. The position is hybrid with some on-site work; 3 days remote and 2 days onsite.

Qualifications

• 3+ years in DevOps or DevSecOps engineering.
• Hands-on with AWS cloud services and IaC.
• Experience implementing CI/CD pipelines and security automation.
• Experience scripting with Python or Bash.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services (CodePipeline, CodeBuild).
• Implement infrastructure-as-code with AWS CDK and CloudFormation.
• Integrate SAST, DAST, SCA and policy-as-code into CI/CD pipelines.
• Automate evidence collection for FedRAMP and NIST controls.
• Support automated environment provisioning and deployment strategies (blue/green, canary).
• Integrate AI-assisted development and DevSecOps tools for code scanning and pipeline automation.
• Monitor pipeline health and drive improvements in delivery metrics.
• Collaborate with development and security teams to implement secure SDLC practices.

Skills

DevSecOps

DevOps

AWS

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

IaC

CI/CD

Security automation

SAST

DAST

SCA

Policy as Code

FedRAMP compliance

NIST security controls

Blue/green deployments

Canary deployments

Python

Bash

AI-assisted DevSecOps tools

Pipeline monitoring

US work authorization

Public Trust clearance

Tools

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

Job description

We are building a team for one of the U.S. Federal Government's largest technology modernization programs, underpinning the U.S. capital markets.
Built on AWS and leveraging an AI-powered software engineering platform, this program offers a unique opportunity to gain hands-on experience with next-generation AI, Agentic AI, cloud technologies, and AI-driven engineering.
If you are looking for technically challenging work, exceptional learning, and a résumé-defining opportunity with national impact, I would love to connect.

Job Title

Jr DevSecOps Engineer

Position Type

Full-Time

Location

Hybrid (2 days onsite)

Days Remote

3 days remote

Position Summary

The DevSecOps Engineer designs, builds, and operates secure software delivery pipelines for a large-scale federal cloud platform built on AWS. This role is responsible for implementing CI/CD pipelines, infrastructure-as-code, security automation, and deployment automation while embedding DevSecOps and shift-left security practices throughout the software development lifecycle. Working closely with developers, architects, and security teams, the DevSecOps Engineer helps deliver secure, compliant, and highly automated software releases that meet federal security and compliance requirements.

Key Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services, including AWS CodePipeline and AWS CodeBuild.
• Implement and maintain infrastructure-as-code using AWS CDK and AWS CloudFormation.
• Integrate security scanning capabilities, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and policy-as-code into CI/CD pipelines.
• Automate compliance evidence collection to support FedRAMP and NIST security controls.
• Support automated environment provisioning and deployment strategies, including blue/green and canary deployments.
• Integrate AI-assisted development and DevSecOps tools for code scanning, testing, and pipeline automation.
• Monitor CI/CD pipeline health, reliability, and performance while driving continuous improvements in delivery metrics.
• Collaborate with development and security teams to implement secure software delivery best practices across the software development lifecycle.

Minimum Experience

• 3+ years of DevOps or DevSecOps engineering experience.
• Hands-on experience with AWS cloud services and infrastructure-as-code.
• Experience implementing CI/CD pipelines and security automation.
• Experience developing automation scripts using Python, Bash, or similar scripting languages.

Mandatory Skills

• DevSecOps.
• DevOps.
• AWS.
• AWS CodePipeline.
• AWS CodeBuild.
• AWS CDK.
• AWS CloudFormation.
• Infrastructure as Code (IaC).
• CI/CD.
• Security automation.
• Static Application Security Testing (SAST).
• Dynamic Application Security Testing (DAST).
• Software Composition Analysis (SCA).
• Policy as Code.
• FedRAMP compliance.
• NIST security controls.
• Blue/green deployments.
• Canary deployments.
• Python, Bash, or similar scripting languages.
• AI-assisted DevSecOps tools.
• Pipeline monitoring and optimization.
• U.S. work authorization.
• Ability to obtain a Public Trust clearance.

Nice-to-Have Skills

• AWS DevOps Engineer or AWS Security certification.
• FedRAMP implementation experience.
• NIST compliance experience.
• Experience using AI-assisted DevSecOps and software engineering tools.

Degrees and Certifications

Required

• Degree requirements were not specified in the original job description.

Preferred

• AWS DevOps Engineer certification.
• AWS Security certification.