Remote DevSecOps Engineer – Federal Cloud & CI/CD

ICF

United States

Remote

USD 99,000 - 168,000

Full time

11 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

ICF’s Digital Modernization division is seeking a DevSecOps Engineer to integrate security into cloud and application delivery for a federal client. You will work with senior DevOps, security, and application teams to support CI/CD pipelines, cloud infrastructure, automated testing, and security controls in alignment with federal standards. Remote within the United States with ET core hours.

Requirements include U.S. citizenship, 5+ years in DevOps or cybersecurity, and a relevant degree.

Qualifications

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field.
Active federal security clearance or favorable background investigation.
Experience with GitLab and Jenkins for CI/CD.
Familiarity with cloud platforms AWS or Azure, including GovCloud.
Linux and Windows Server administration with scripting (Bash, Python, PowerShell).
Exposure to DevSecOps and security tooling (Snyk, Trivy, Checkov, SonarQube, Tenable, Prisma Cloud).
Experience with Docker and Kubernetes/OpenShift concepts.
Familiarity with Splunk SIEM and log analysis.
Exposure to low-code or COTS platforms (Appian, Salesforce, ServiceNow).
Basic knowledge of SQL Server and relational databases.
Familiarity with NIST 800-53, FedRAMP, or similar standards.
Entry-level certifications such as AWS Cloud Practitioner, Azure Fundamentals, Security+.
Experience in regulated or government environments.

Responsibilities

Develop, maintain, and monitor CI/CD pipelines using GitLab CI or Jenkins, including artifact management.
Support automated deployment and environment promotion for applications including Appian.
Implement automated quality gates in pipelines with tests and code-quality checks.
Integrate security scanning and compliance checks (SAST, DAST, dependency, container scanning).
Support cloud infrastructure in AWS or Azure, including GovCloud, with IaC tooling.
Support monitoring and observability with Splunk and performance testing.
Assist with backup/recovery operations and availability objectives.
Document configurations and security controls for audits and ATO activities.
Collaborate with development, operations, and security in Agile/Scrum.
Learn and apply NIST 800-53, FISMA, and FedRAMP frameworks.