Junior DevSecOps Engineer

Doist; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Peregrine Advisors is seeking engineers who treat security and reliability as core to the build. You will automate what others do by hand, with auditable trails and clear communication. This hybrid Washington, DC role requires a proactive engineer who can own outcomes and adapt across client engagements.

You will contribute to building secure pipelines, automation, and tooling for a federal platform, embracing shift-left security practices and ongoing learning.

Qualifications

• Foundation in scripting, cloud fundamentals, and delivery automation.
• Delivery habits: version control, automated testing, code review, and secure configuration.
• Strong communication and adaptability across roles and clients.

Responsibilities

• Build and operate secure CI/CD pipelines that carry the federal platform into production.
• Write infrastructure-as-code on AWS so environments are templated and reproducible.
• Containerize services and keep images patched, scanned, and minimal.
• Wire up monitoring, logging, and vulnerability scanning to make systems observable and provably secure.
• Assist in assembling security evidence for Authority to Operate (ATO).

Skills

Scripting

Cloud fundamentals

Delivery automation

Version control

Automated testing

Code review

Secure configuration

Tools

AWS

Amazon Q Developer

NIST 800-53

Job description

Peregrine Advisors is a firm founded on a simple conviction: the best solutions come from the people closest to the problem, given real ownership and the tools to deliver. We are a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission to deliver for client stakeholders and the US public, looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution.

Your first assignment

Your first assignment will likely include helping build and operate the secure delivery pipelines that carry a federal platform's services into production by:

• building and maintaining continuous integration and continuous delivery (CI/CD) pipelines that take services from commit to deployment the same way every time
• writing infrastructure-as-code on Amazon Web Services (AWS) so environments are created from templates, not by hand
• containerizing services and keeping images patched, scanned, and small
• wiring up the monitoring, logging, and vulnerability scanning that make systems observable and provably secure
• or helping assemble the security evidence that carries a system through its Authority to Operate (ATO).

Adaptability and an appetite for learning new concepts, systems, and tools are what will move you forward fastest here.

What you'll build

Pipelines a team relies on every day: builds, tests, and deployments that are routine rather than events.

The security fabric around them, learned by doing: scanning, monitoring and logging, and controls mapped to National Institute of Standards and Technology (NIST) Special Publication 800-53.

Working automation reviewed by people who explain what to change and why, and the findings you chase down along the way: the fastest ways to get good at this.

Your part of the shift-left practice that builds security in rather than bolting it on, growing as you show you can carry more.

AI-assisted engineering as standard practice: learning tools like Amazon Q Developer across the lifecycle.

In time, the firm itself: new capabilities, tools, and lines of business you help spin up.

Who you are

You treat security and reliability as part of the build, not a gate at the end, and you are highly motivated to develop as an engineer who automates what others do by hand and leaves an audit trail behind. You ask when you are stuck rather than guessing, you take feedback as the fastest route forward, and when priorities shift, you shift with them. You communicate clearly, adapt across roles and clients, and care about creating public value. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

A foundation in scripting, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.

The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.

The communication to say clearly what you have done, what you are stuck on, and what you need.

The precision to work where accuracy and auditability are not optional.

What you'll need

U.S. citizenship (this initial engagement may be staffed by U.S. citizens only) and the ability to obtain a Public Trust determination.

This is a hybrid role based in the Washington, DC metropolitan area, and it requires commuting into DC regularly.

Everything else, the years, the certifications, the specific tools, we ask in the application and get into during the interview.

What we offer

A high-performing team of developers, engineers, data scientists, architects, and strategists solving complex, real-world problems, with work that runs from strategy formulation to hands‑on implementation. We develop people across roles and clients, with extensive onboarding and sponsored training and professional development. And Peregrine has been a Benefit Corporation from day one: public value is built into the work itself, not bolted on afterward. Work worth your best years.

What we commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.

We hire people who want to help build the firm, not just work at it. If that is you, apply.

Peregrine Advisors is an equal opportunity employer.