Remote DevSecOps Engineer (TS) – Federal Cloud Security

ICF; Reston (VA); On-site; USD 90,000 - 184,000; Full time

Job summary

ICF is seeking a DevSecOps Engineer to integrate security into cloud and application development workflows for a federal client. This remote role may require occasional travel to the DC Metro area for onsite meetings.

You will contribute to CI/CD pipelines, IaC, and automated security controls, working with teams across DevOps, security, and applications in an Agile/Scrum environment. A TS clearance and U.S. residency are required.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field.
• 2+ years of experience in DevOps, cloud engineering, systems engineering, or cybersecurity.
• Familiarity with at least one cloud platform (AWS, Azure, or GCP).
• Working knowledge of Linux and basic scripting (Bash, Python, or similar).
• Exposure to DevSecOps tools (e.g., SonarQube, Snyk, Trivy, Checkov, Aqua, Prisma Cloud).
• Experience with Docker and basic Kubernetes concepts.
• Familiarity with federal security standards (NIST 800-53, FedRAMP).
• Entry-level certifications such as AWS Cloud Practitioner, Azure Fundamentals, Security+.

Responsibilities

• Assist in development, maintenance, and monitoring of CI/CD pipelines using tools like GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
• Support IaC efforts using Terraform, CloudFormation, or ARM templates.
• Help integrate security scanning and compliance checks into build and deployment pipelines (SAST, DAST, dependency scanning, container scanning).
• Support cloud infrastructure in AWS, Azure, or GCP with emphasis on security best practices.
• Assist with containerization using Docker and orchestration with Kubernetes.
• Monitor environments, logs and alerts; assist with troubleshooting and incident response.
• Document configurations, processes, and security controls to support audits and compliance.
• Collaborate with development, operations, and security teams in an Agile/Scrum environment.
• Learn and apply federal security frameworks such as NIST, FISMA, and FedRAMP.

Skills

DevOps

Cloud engineering

Cybersecurity

Scripting

Education

Bachelor's degree in Computer Science or related

Tools

Terraform

CloudFormation

ARM templates

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Docker

Kubernetes

Job description

ICF is seeking a DevSecOps Engineer to integrate security into cloud and application development workflows for a federal client. This remote role may require occasional travel to the DC Metro area for onsite meetings.

You will contribute to CI/CD pipelines, IaC, and automated security controls, working with teams across DevOps, security, and applications in an Agile/Scrum environment. A TS clearance and U.S. residency are required.