Junior DevSecOps Engineer: AWS Cloud & AI Security

QBA Worldwide; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

QBA Worldwide seeks a Jr DevSecOps Engineer to design, build, and operate secure software delivery pipelines on a federal cloud platform built on AWS. You will implement CI/CD, infrastructure-as-code, and security automation while embedding DevSecOps and shift-left security across the SDLC.

Collaborate with developers, architects, and security teams to ensure compliant, highly automated releases. Hybrid work (2 onsite days, 3 remote) supporting a nationally impactful program.

Qualifications

• 3+ years of DevOps or DevSecOps engineering experience.
• Hands-on experience with AWS cloud services and infrastructure-as-code.
• Experience implementing CI/CD pipelines and security automation.
• Experience developing automation scripts using Python, Bash, or similar scripting languages.

Responsibilities

• Design, build, and maintain secure CI/CD pipelines using AWS-native services, including AWS CodePipeline and AWS CodeBuild.
• Implement and maintain infrastructure-as-code using AWS CDK and AWS CloudFormation.
• Integrate security scanning capabilities, including SAST, DAST, SCA, and policy-as-code into CI/CD pipelines.
• Automate compliance evidence collection to support FedRAMP and NIST security controls.
• Support automated environment provisioning and deployment strategies, including blue/green and canary deployments.
• Integrate AI-assisted development and DevSecOps tools for code scanning, testing, and pipeline automation.
• Monitor CI/CD pipeline health, reliability, and performance while driving continuous improvements in delivery metrics.
• Collaborate with development and security teams to implement secure software delivery best practices across the software development lifecycle.

Skills

DevSecOps

DevOps

AWS

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

Infrastructure as Code

CI/CD

Security automation

SAST

DAST

SCA

Policy as Code

FedRAMP

NIST controls

Blue/green deployments

Canary deployments

Python

Bash

Public Trust clearance

US work authorization

Tools

AWS CodePipeline

AWS CodeBuild

AWS CDK

AWS CloudFormation

Job description

QBA Worldwide seeks a Jr DevSecOps Engineer to design, build, and operate secure software delivery pipelines on a federal cloud platform built on AWS. You will implement CI/CD, infrastructure-as-code, and security automation while embedding DevSecOps and shift-left security across the SDLC.

Collaborate with developers, architects, and security teams to ensure compliant, highly automated releases. Hybrid work (2 onsite days, 3 remote) supporting a nationally impactful program.