Remote GovCloud DevSecOps Engineer for Secure ML

Pantheon Data; Reston (VA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

SmartBenefits

Remote-friendly

Flexible schedule

Job summary

Pantheon Data is seeking a DevSecOps Engineer to design and operate secure, cloud-native platforms within AWS GovCloud, supporting ML workloads handling CUI/PII/PHI. This role automates gated security controls across CI/CD pipelines and administers production-grade EKS clusters via GitOps under federal standards.

You will implement Terraform-based hardened environments, manage EKS lifecycle with Helm, and integrate GHAS, CodeQL, and secret scanning.

Qualifications

• 3+ years in DevSecOps/DevOps with production AWS experience.
• Experience building enterprise-grade pipelines with GitHub Actions or GitLab CI/CD.
• Strong knowledge of code security tools (GHAS, CodeQL, SAST).
• Experience with Terraform for modular networking and security stacks.
• Familiarity with NIST 800-53, FedRAMP, or DoD RMF in GovCloud.

Responsibilities

• Secure infrastructure design for AWS GovCloud aligned with baselines.
• Manage EKS clusters, Helm, and GitOps tooling for declarative state.
• Develop secure CI/CD pipelines and integrate security tooling.
• Deploy ML workloads in regulated environments with observability.

Skills

CI/CD Expertise

GitHub Actions

GitLab CI/CD

Tools

Terraform

Argo CD

Flux

Helm

Kubernetes

AWS GovCloud

Job description

Pantheon Data is seeking a DevSecOps Engineer to design and operate secure, cloud-native platforms within AWS GovCloud, supporting ML workloads handling CUI/PII/PHI. This role automates gated security controls across CI/CD pipelines and administers production-grade EKS clusters via GitOps under federal standards.

You will implement Terraform-based hardened environments, manage EKS lifecycle with Helm, and integrate GHAS, CodeQL, and secret scanning.