Lead DevSecOps Engineer – AI-Powered Compliance & Cloud

Fortreum; Reston (VA); On-site; USD 155,000 - 205,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401K with match

Training stipends

Certification reimbursements

Home office stipend

Job summary

Fortreum is a trusted cloud and cybersecurity leader delivering FedRAMP, CMMC, and NIST-based assessments across federal and enterprise environments. We’re expanding Kovr AI Platform to automate compliance workflows and accelerate ATO timelines.

We seek a hands-on DevSecOps Engineer to embed with federal customers, deploy Kovr AI, and design scalable CI/CD, IaC, and security controls across cloud and hybrid environments, including classified National Security contexts.

Qualifications

• 7+ years of DevOps, Platform Engineering, or Site Reliability Engineering experience.
• Hands-on experience architecting AWS infrastructure using Terraform at scale.
• Strong production experience with Kubernetes (EKS or similar), including cluster design, Helm Charts, and GitHub/GitOps workflows.
• Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments.
• Familiarity with OSCAL or other machine‑readable compliance/documentation frameworks.
• Experience integrating SAST/DAST or IaC security scanning into a pipeline.
• Scripting/automation proficiency (Python, Bash, or similar).
• U.S. Citizenship, with the ability to obtain and maintain a Top Secret clearance
• Local to Washington, DC metro area

Responsibilities

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery.
• Manage cloud infrastructure (AWS, with exposure to Azure/GCP) using Infrastructure as Code (Terraform).
• Administer and scale containerized workloads (Kubernetes/EKS, Helm, ArgoCD).
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks.
• Design observability strategy (logging, metrics, alerting, SLOs) to support production reliability at scale.
• Integrate DevOps tooling (GitHub, JIRA, Splunk, Snyk) into automated compliance and remediation workflows.
• Collaborate with existing engineering and compliance teams to ensure infrastructure changes maintain continuous authorization posture.
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping.
• Troubleshoot production issues and drive continuous improvement in deployment reliability.
• Build and maintain documentation, runbooks, and architecture decision records.
• Represent infrastructure/security in cross-functional planning, including customer‑facing technical conversations when needed

Skills

DevSecOps

Terraform

Kubernetes

FedRAMP/CMMC/NIST

OSCAL

Scripting (Python/Bash)

GitHub/GitOps

SAST/DAST security

TS Clearance

DC metro local

Tools

JIRA

Splunk

Snyk

GitHub

ArgoCD

Job description

Fortreum is a trusted cloud and cybersecurity leader delivering FedRAMP, CMMC, and NIST-based assessments across federal and enterprise environments. We’re expanding Kovr AI Platform to automate compliance workflows and accelerate ATO timelines.

We seek a hands-on DevSecOps Engineer to embed with federal customers, deploy Kovr AI, and design scalable CI/CD, IaC, and security controls across cloud and hybrid environments, including classified National Security contexts.