Junior DevSecOps Engineer (CI/CD, AWS)

Uncover; Washington, Northern (District of Columbia, KY); Hybrid; USD 130,000 - 170,000; Full time

Job summary

Peregrine Advisors is seeking engineers in the Washington, DC area to join a security-forward delivery team. You will build and operate secure delivery pipelines, write IaC for AWS, containerize services, and implement automated security testing and monitoring.

You thrive on ownership, learn quickly, and communicate clearly across teams while delivering auditable, robust systems that support the federal mission.

Qualifications

• Experience building CI/CD pipelines and automated health checks.
• Writing infrastructure-as-code on AWS from templates.
• Containerizing services with patched, small images.
• Wiring up monitoring, logging, and vulnerability scanning.

Responsibilities

• Treat security and reliability as part of the build, not a gate at the end.
• Communicate clearly, adapt across roles and clients, and own outcomes.
• Learn quickly and be comfortable with changing priorities.

Skills

CI/CD pipelines

AWS

Infrastructure as Code

Job description

Peregrine Advisors is a firm founded on a simple conviction: the best solutions come from the people closest to the problem, given real ownership and the tools to deliver. We are a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission to deliver for client stakeholders and the US public, looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution.

Your first assignment

Your first assignment will likely include helping build and operate the secure delivery pipelines that carry federal systems into production by:

• building and maintaining continuous integration and continuous delivery (CI/CD) pipelines that take services from commit to deployment the same way every time, including progressive delivery strategies (blue/green and canary deployments) with automated health checks and rollback;
• writing infrastructure-as-code on Amazon Web Services (AWS) so environments are created from templates, not by hand;
• containerizing services and keeping images patched, scanned, and small;
• wiring up the monitoring, logging, and vulnerability scanning that make systems observable and provably secure;
• orhelping assemble the security evidence that carries a system through its Authority to Operate (ATO).

Adaptability and an appetite for learning new concepts, systems, and tools are what will move you forward fastest here. The work is real, hard, and it matters. It is also where you start, not the shape of your career here: we hire people, not seats, and we move our best to where the hardest problems are.

Your part of the shift-left practice that builds security in rather than bolting it on, growing as you show you can carry more. AI-assisted engineering as standard practice: learning tools like Amazon Q Developer across the lifecycle. In time, the firm itself: new capabilities, tools, and lines of business you help spin up.

Pipelines a team relies on every day: builds, tests, and deployments that are routine rather than events. The security fabric around them, learned by doing: automated security testing (SAST, DAST, SCA), policy-as-code checks, monitoring and logging, and controls mapped to NIST SP 800-53. Working automation reviewed by people who explain what to change and why, and the findings you chase down along the way: the fastest ways to get good at this.

Who you are

You treat security and reliability as part of the build, not a gate at the end, and you are highly motivated to develop as an engineer who automates what others do by hand and leaves an audit trail behind. You ask when you are stuck rather than guessing, you take feedback as the fastest route forward, and when priorities shift, you shift with them. You communicate clearly, adapt across roles and clients, and care about creating public value. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• A foundation in scripting, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.
• The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.
• The communication to say clearly what you have done, what you are stuck on, and what you need.
• The precision to work where accuracy and auditability are not optional.

What you'll need

Sole United States citizenship and the ability to obtain a Public Trust determination are required for this initial engagement. This is a hybrid role based in the Washington, DC metropolitan area, and it requires commuting into DC regularly. Everything else, the years, the certifications, the specific tools, we ask in the application and get into during the interview.

What we offer

A high-performing team of developers, engineers, data scientists, architects, and strategists solving complex, real-world problems, with work that runs from strategy formulation to hands-on implementation. We develop people across roles and clients, with extensive onboarding and sponsored training and professional development. And Peregrine has been a Benefit Corporation from day one: public value is built into the work itself, not bolted on afterward. Work worth your best years.

We commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.

Peregrine Advisors is an equal opportunity employer.

Peregrine exclusively works with OPEN Data Jobs to recruit our team.