Junior DevSecOps Engineer – AWS, Automation

Jobtailor; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

Jobtailor is seeking a DevSecOps Engineer to build and maintain CI/CD pipelines, implement progressive delivery, and write infrastructure-as-code on AWS to enable secure, scalable software delivery.

You will containerize services, implement monitoring and vulnerability scanning, and help produce security evidence for Authority to Operate (ATO) while applying policy-as-code and shift-left security.

Qualifications

• 1+ years of software development, platform, or operations engineering experience.
• Bachelor's Degree in Computer Science or related field.
• Scripting ability (Python, Bash, or PowerShell).
• Working knowledge of CI/CD concepts with hands-on experience in at least one pipeline tool.
• Familiarity with AWS cloud services and with containerization.
• Familiarity with infrastructure-as-code (CloudFormation or Terraform).
• Sole United States citizenship; able to obtain Public Trust determination.

Responsibilities

• Build and maintain CI/CD pipelines from commit to deployment.
• Implement progressive delivery strategies, including blue/green and canary deployments, automated health checks, and rollback.
• Write infrastructure-as-code on AWS.
• Containerize services and keep images patched, scanned, and small.
• Implement monitoring, logging, and vulnerability scanning.
• Help assemble security evidence for Authority to Operate (ATO).
• Build automated security testing (SAST, DAST, SCA).
• Implement policy-as-code checks and controls mapped to NIST SP 800-53.
• Contribute to shift-left security practices.
• Use AI-assisted engineering tools such as Amazon Q Developer.
• Develop new capabilities, tools, and lines of business.

Skills

CI/CD Pipeline Development

Infrastructure-as-Code

AWS Cloud Services

Automated Security Testing

Vulnerability Scanning

Education

Bachelor's Degree in Computer Science

Tools

CI/CD Pipeline Tools

Vulnerability Scanning Tools

AI-assisted Developer Tooling

Job description

• Build and maintain CI/CD pipelines from commit to deployment
• Implement progressive delivery strategies, including blue/green and canary deployments, automated health checks, and rollback
• Write infrastructure-as-code on AWS
• Containerize services and keep images patched, scanned, and small
• Implement monitoring, logging, and vulnerability scanning
• Help assemble security evidence for Authority to Operate (ATO)
• Build automated security testing, including SAST, DAST, and SCA
• Implement policy-as-code checks and controls mapped to NIST SP 800-53
• Contribute to shift-left security practices
• Use AI-assisted engineering tools such as Amazon Q Developer
• Develop new capabilities, tools, and lines of business

Requirements

• 1+ years of software development, platform, or operations engineering experience
• Bachelor's Degree in Computer Science or related field
• Scripting ability (Python, Bash, or PowerShell)
• Working knowledge of continuous integration and continuous delivery (CI/CD) concepts, with hands-on experience in at least one pipeline tool
• Familiarity with cloud services on Amazon Web Services (AWS) and with containerization
• Familiarity with infrastructure-as-code (CloudFormation or Terraform)
• Basic proficiency in writing, PowerPoint, and Excel
• Sole United States citizenship
• Ability to obtain a Public Trust determination
• Preferred: Exposure to FISMA compliance, NIST SP 800-53 controls, or Authority to Operate (ATO) processes
• Preferred: Vulnerability scanning or security tooling experience (SAST, DAST, or policy-as-code)
• Preferred: Amazon Web Services exposure or certification
• Preferred: Federal information technology experience
• Preferred: Familiarity with AI-assisted developer tooling

Core Competencies

Demonstrates expertise in building and maintaining CI/CD pipelines, implementing progressive delivery strategies, and writing infrastructure-as-code on AWS. Proficient in security practices, including automated security testing and compliance with NIST SP 800-53.

Highest-signal resume keywords

• CI/CD Pipeline Development
• Infrastructure-as-Code (CloudFormation, Terraform)
• AWS Cloud Services
• Automated Security Testing (SAST, DAST)
• Vulnerability Scanning

Hard Skills

• Software Development
• Platform Engineering
• Operations Engineering
• Scripting (Python, Bash, PowerShell)
• Continuous Integration
• Continuous Delivery
• Containerization
• Policy-as-Code
• Monitoring and Logging
• Progressive Delivery Strategies

Soft Skills

• Basic Proficiency in Writing
• Basic Proficiency in PowerPoint
• Basic Proficiency in Excel

Certifications & Qualifications

• Bachelor's Degree in Computer Science
• Public Trust Determination

Industry Keywords

• FISMA Compliance
• NIST SP 800-53
• Authority to Operate (ATO)
• Federal Information Technology

Tools & Technologies

• Amazon Q Developer
• CI/CD Pipeline Tools
• Vulnerability Scanning Tools
• AI-assisted Developer Tooling