Jr. DevSecOps Engineer – Secret Clearance

Dunhill Professional Search & Government Solutions; Washington (District of Columbia); On-site; USD 65,000 - 85,000; Full time

Job summary

Dunhill Professional Search & Government Solutions seeks a Junior DevSecOps Engineer to support secure CI/CD pipelines in an enterprise setting. You will help design and maintain automation, apply security scanning, and collaborate with development, security, and operations teams to improve secure software delivery.

You will assist with infrastructure-as-code, automated testing, and deployment strategies while documenting processes to align with enterprise standards and DoD 8140 requirements.

Qualifications

• Bachelor’s degree (or equivalent) in IT, Cybersecurity, CS, IS, data science, software engineering, or related field.
• Typically 1–3 years of experience in DevSecOps, CI/CD, or software engineering environments.
• Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes.
• Familiarity with Infrastructure-as-Code concepts and tools and basic scripting for automation.
• Understanding of secure development practices and security scanning approaches within automated pipelines.

Responsibilities

• Assist in designing, building, and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions.
• Integrate security scanning tools (SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle.
• Support Infrastructure-as-Code practices and automated environment provisioning for consistent environments.
• Implement automated testing and quality gates in pipelines to enforce code security and reliability.
• Manage source code repositories, branching strategies, and artifact versioning for traceability and controlled releases.
• Monitor pipeline performance, troubleshoot build and deployment issues, and support blue-green/canary deployments.
• Document DevSecOps processes and configurations, and contribute to continuous improvement with metrics.

Skills

DevSecOps mindset

CI/CD expertise

Scripting (Python/Bash)

Automation

Documentation

Education

Bachelor’s degree (IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or related field)

Tools

Docker

Kubernetes

Jenkins

GitLab CI

GitHub Actions

Job description

The DevSecOps Engineer - Junior supports the development and operation of secure DevSecOps pipelines in an enterprise continuous integration and delivery environment. This role assists with integrating security practices throughout the software development lifecycle while maintaining automation pipelines that improve build, test, and deployment reliability. The position works collaboratively with development, security, and operations teams to enhance secure software delivery processes and maintain documentation for pipelines, tooling, and procedures.

Key Responsibilities

Assist in designing, building, and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, or GitHub Actions.

Integrate security scanning tools (e.g., SAST, DAST, dependency scanning) into pipelines to detect vulnerabilities early in the lifecycle.

Support Infrastructure-as-Code practices and automated environment provisioning to enable consistent and repeatable development, test, and production environments.

Implement automated testing and quality gates in pipelines to enforce code security, reliability, and compliance standards.

Manage source code repositories, branching strategies, and artifact versioning to ensure traceability and controlled releases.

Monitor pipeline performance, troubleshoot build and deployment issues, and support deployment strategies such as blue-green and canary releases.

Document DevSecOps processes, pipeline configurations, and operational procedures, and contribute to continuous improvement initiatives using metrics and feedback.

Collaborate with development, security, and operations teams to optimize secure software delivery practices and maintain alignment with enterprise standards.

Required Qualifications

Bachelor’s degree (or equivalent experience) in IT, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or a related field.

Typically 1-3 years of experience in DevSecOps, CI/CD, or software engineering environments.

Foundational experience building or maintaining CI/CD pipelines and integrating automated build, test, and deployment processes.

Familiarity with Infrastructure-as-Code concepts and tools and basic scripting for automation.

Understanding of secure development practices and security scanning approaches within automated pipelines.

Must meet DoD 8140 requirements and hold an active Secret clearance.

Preferred Qualifications

Familiarity with container platforms such as Docker and Kubernetes in support of modern deployment patterns.

Exposure to security frameworks and compliance standards relevant to enterprise or government environments.

Experience with scripting languages such as Python or Bash to automate pipeline and administrative tasks.

Experience supporting deployment strategies such as blue-green, canary, or rolling deployments.