Remote DevSecOps Engineer: Secure CI/CD & Cloud

Serco; Chantilly (VA); Remote; USD 120,000 - 180,000; Full time

Job summary

Serco is seeking an Experienced DevSecOps Engineer to join a fully remote team. The role emphasizes embedding security in the DevOps lifecycle, building secure CI/CD pipelines, and integrating security tooling such as SAST, DAST, and container scanning.

A strong background in Azure, IaC, and threat modeling is required. The successful candidate will collaborate across development, operations, and security teams, automate infrastructure with Terraform or CloudFormation, monitor for

Qualifications

• U.S. Citizenship required and ability to obtain DoD Secret clearance.
• Bachelor’s degree or equivalent.
• Minimum 5 years in DevOps, security engineering, software engineering, or cloud engineering.
• Proficiency with Azure.
• Experience with CI/CD tools: Jenkins, GitLab CI, GitHub Actions.
• Familiarity with Docker and Kubernetes.
• Strong scripting skills (Python, Bash).
• Willingness to travel up to 10% (CONUS).

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate SAST, DAST, and container scanning into workflows.
• Collaborate with development, operations, and security teams to deliver secure software.
• Automate infrastructure provisioning with IaC tools (Terraform or CloudFormation).
• Monitor systems for vulnerabilities and respond to incidents.
• Conduct threat modeling and risk assessments for systems.
• Stay current with emerging security threats and best practices.

Skills

US Citizenship

DoD security clearance eligibility

Azure proficiency

CI/CD knowledge

Docker & Kubernetes

Scripting (Python/Bash)

Travel up to 10%

Education

Bachelor’s degree

Tools

Jenkins

GitLab CI

GitHub Actions

Terraform

CloudFormation

Job description

Serco is seeking an Experienced DevSecOps Engineer to join a fully remote team. The role emphasizes embedding security in the DevOps lifecycle, building secure CI/CD pipelines, and integrating security tooling such as SAST, DAST, and container scanning.

A strong background in Azure, IaC, and threat modeling is required. The successful candidate will collaborate across development, operations, and security teams, automate infrastructure with Terraform or CloudFormation, monitor for