Onsite DevSecOps Engineer — Washington, DC

XCell, LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health Insurance

Paid Time Off

Flex Schedule

Training & Budget Tools

Job summary

XCell, LLC seeks a mid-level DevSecOps Engineer to join a federal engineering team in Washington, DC, enhancing infrastructure automation, CI/CD pipelines, container orchestration, and secure delivery. You will inherit existing patterns, follow standards, and contribute in a production environment.

Responsibilities include maintaining Terraform/OpenTofu, writing Ansible playbooks, and building GitHub Actions with security gates. Candidates must be U.S. citizens, relocate to DC, and work on-site.

Qualifications

• Infrastructure as code: hands‑on Terraform and OpenTofu, including module development, remote state, and workspace management.
• Configuration as code: proficiency with Ansible, including playbook and role development, dynamic inventories, and Ansible Vault.
• CI/CD: experience designing and maintaining GitHub Actions workflows, including reusable workflows, matrix builds, and security‑gate integration.
• Containers: working knowledge of Docker image authoring and hardening, Kubernetes and Helm, and container scanning tools such as Trivy or Grype.
• Security integration: familiarity with SAST tools (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect‑Secrets), and policy‑as‑code (OPA/Rego).
• Version control: strong Git workflow skills, including branching strategies, pull‑request reviews, and protected branches.

Responsibilities

• Infrastructure as code: maintain, extend, and refactor Terraform and OpenTofu, including modular configurations, remote state, and workspace management.
• Configuration as code: develop and maintain Ansible playbooks and roles, using dynamic inventories and Ansible Vault for secrets.
• CI/CD: build and improve GitHub Actions workflows with security gates, including static analysis, dependency and secrets scanning, and policy‑as‑code validation.
• Containers: author and harden Dockerfiles, manage Kubernetes manifests and Helm charts, support namespace and RBAC configuration, and help with cluster health and image scanning.
• Security integration: embed SAST and DAST scanning in pipelines, enforce CIS benchmarks and customer security baselines, and support NIST and FISMA compliance.
• Team delivery: work within the team’s version control, change management, and peer‑review workflows; participate in stand‑ups, sprint planning, and technical reviews; and document your work.

Skills

Infrastructure as code

Configuration as code

CI/CD

Containers

Security integration

Version control

Collaboration & communication

Tools

Terraform

OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes

Helm

Trivy

Grype

OPA

Rego

HashiCorp Vault

Gitleaks

Detect-Secrets

Semgrep

Checkov

tfsec

AWS

Job description

XCell, LLC seeks a mid-level DevSecOps Engineer to join a federal engineering team in Washington, DC, enhancing infrastructure automation, CI/CD pipelines, container orchestration, and secure delivery. You will inherit existing patterns, follow standards, and contribute in a production environment.

Responsibilities include maintaining Terraform/OpenTofu, writing Ansible playbooks, and building GitHub Actions with security gates. Candidates must be U.S. citizens, relocate to DC, and work on-site.