Security-Driven DevSecOps Engineer | Terraform & Kubernetes

Info Gain Consulting; Virginia (MN); Remote; USD 120,000 - 180,000; Full time

Job summary

Info Gain Consulting is seeking an exceptional DevSecOps Engineer to join our team to support the Congressional Budget Office IT support – Sentry contract. You will develop infrastructure as code using Terraform and OpenTofu, manage remote state, and harden cloud environments.

Responsibilities include building secure CI/CD pipelines with GitHub Actions, implementing SAST and secret detection, managing Docker, Kubernetes, and Helm, applying CIS benchmarks and NIST SP 800-53 controls, and adhering

Qualifications

• Experience in DevSecOps practices for secure software delivery.
• Familiarity with infrastructure-as-code tooling and security controls.

Responsibilities

• Develop Terraform and OpenTofu IaC modules.
• Manage remote state, workspaces, and related IaC controls.
• Develop Ansible playbooks, roles, dynamic inventories, and Vault-based secrets management.
• Develop GitHub Actions CI/CD pipelines with security gates.
• Implement SAST, dependency scanning, secret detection, and policy-as-code controls.
• Manage and harden Docker, Kubernetes, and Helm environments.
• Apply CIS benchmarks and NIST SP 800-53 security-hardening requirements.
• Contribute peer-reviewed code and support sprint-based delivery.
• Follow formal change-advisory and configuration-management processes.

Tools

Terraform

OpenTofu

Ansible

Vault

GitHub Actions

Docker

Kubernetes

Helm

CIS benchmarks

NIST SP 800-53

Job description

Info Gain Consulting is seeking an exceptional DevSecOps Engineer to join our team to support the Congressional Budget Office IT support – Sentry contract. You will develop infrastructure as code using Terraform and OpenTofu, manage remote state, and harden cloud environments.

Responsibilities include building secure CI/CD pipelines with GitHub Actions, implementing SAST and secret detection, managing Docker, Kubernetes, and Helm, applying CIS benchmarks and NIST SP 800-53 controls, and adhering