Remote DevSecOps Engineer — Federal Cloud & Security

ICF International; Reston (VA); Remote; USD 99,000 - 168,000; Full time

Job summary

ICF is seeking a DevSecOps Engineer to support a federal client by integrating security into cloud and application delivery workflows.

Remote within the United States, with core hours in Eastern Time; U.S. citizenship and ability to obtain/maintain a federal background investigation are required. You will collaborate with senior DevOps, security, and application teams to secure pipelines and cloud infrastructure.

Qualifications

• Bachelor's degree in a technical field (CS/IS/Cyber)
• Active federal clearance or favorable investigation
• Familiarity with CI/CD concepts and tools (GitLab/Jenkins)
• Experience with at least one cloud platform (AWS/Azure; GovCloud)
• Linux knowledge (RHEL) and Windows Server, scripting basics
• Exposure to DevSecOps and security tooling (SAST/DAST, Snyk, Trivy)
• Experience with container tech (Docker, Kubernetes/OpenShift)
• Familiarity with Splunk or SIEM/log analysis
• Experience with low-code/COTS platforms (Appian, Salesforce) deployment
• Understanding of NIST 800-53, FedRAMP or federal standards
• Entry-level cloud/security certifications (AWS Cloud Practitioner, Azure Fundamentals, Security+)
• Experience in regulated/government environments

Responsibilities

• Assist in CI/CD pipeline development, maintenance and monitoring
• Support automated deployment and environment promotion for apps (e.g., Appian)
• Implement automated quality gates (unit/integration tests, static analysis)
• Integrate security scanning and compliance checks (SAST, DAST, dependencies)
• Support cloud infrastructure in AWS/Azure incl. GovCloud with IaC
• Assist with monitoring, logging (Splunk) and incident response
• Support backup/recovery operations and RPO/RTO objectives
• Document configurations and security controls for audits and ATO
• Collaborate in an Agile/Scrum environment
• Learn/apply federal security frameworks (NIST 800-53, FISMA, FedRAMP)

Skills

DevOps

Cloud engineering

Security

CI/CD

Scripting (Bash, Python)

Education

Bachelor's degree in CS/IS/CYBER

Tools

GitLab

Jenkins

Terraform

CloudFormation

Splunk

Snyk

Job description

ICF is seeking a DevSecOps Engineer to support a federal client by integrating security into cloud and application delivery workflows.

Remote within the United States, with core hours in Eastern Time; U.S. citizenship and ability to obtain/maintain a federal background investigation are required. You will collaborate with senior DevOps, security, and application teams to secure pipelines and cloud infrastructure.