Remote Federal DevSecOps Engineer - Cloud & Security

ICF; Reston (VA); Remote; USD 99,000 - 168,000; Full time

Job summary

ICF is seeking a DevSecOps Engineer to join our Digital Modernization division and support a federal client. You will help integrate security into CI/CD pipelines, automate testing, and govern cloud infrastructure and IaC using Terraform or CloudFormation.

Collaborating with dev, security, and operations teams in an Agile/Scrum environment, you will work with AWS or Azure (GovCloud), perform security scanning (SAST/DAST), and ensure compliance with NIST 800-53 and FedRAMP.

Qualifications

• Minimum 5+ years in DevOps, cloud engineering, systems engineering, or cybersecurity.
• Ability to obtain and maintain a favorable federal background investigation/suitability determination.
• Experience with GitLab and/or Jenkins in CI/CD environments.
• Familiarity with AWS/Azure (GovCloud) and Linux/Windows environments; scripting basics.

Responsibilities

• Assist in developing, maintaining, and monitoring CI/CD pipelines (GitLab CI/Jenkins; Nexus for artifacts).
• Support automated deployment from development through production for apps on COTS/low-code platforms (e.g., Appian).
• Implement automated quality gates in pipelines (unit/integration tests, static analysis).
• Integrate security scanning/controls (SAST, DAST, dependency and container scanning).
• Support cloud infra in AWS/Azure including GovCloud; work with IaC (Terraform, CloudFormation).
• Help monitor/log with Splunk; assist with incident response and backups/recovery.

Skills

DevSecOps

CI/CD

Agile/Scrum

Federal contracting

Education

Bachelor's degree in Computer Science/Information Systems/Cybersecurity

Active federal security clearance

Tools

GitLab

Jenkins

Nexus

Terraform

CloudFormation

AWS

GovCloud

Splunk

Snyk

Trivy

Checkov

Prisma Cloud

Docker

Kubernetes/OpenShift

Appian

Salesforce

ServiceNow

Job description

ICF is seeking a DevSecOps Engineer to join our Digital Modernization division and support a federal client. You will help integrate security into CI/CD pipelines, automate testing, and govern cloud infrastructure and IaC using Terraform or CloudFormation.

Collaborating with dev, security, and operations teams in an Agile/Scrum environment, you will work with AWS or Azure (GovCloud), perform security scanning (SAST/DAST), and ensure compliance with NIST 800-53 and FedRAMP.