Senior AWS DevSecOps Engineer – GovCloud & ML Security

Pantheon Data LLC.; Reston, Northern (VA, KY); Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

SmarTrip pre-tax benefits

Tuition assistance possible

Job summary

Pantheon Data is seeking a Senior AWS DevSecOps Engineer to design and operate secure, cloud-native platforms in AWS GovCloud, focusing on ML workloads and data processing with CUI/PII/PHI. You will automate gated security controls across CI/CD pipelines and administer production-grade EKS clusters using GitOps.

The role requires 5+ years in DevSecOps, Terraform, GitHub Actions or GitLab CI, and compliance knowledge (NIST 800-53, FedRAMP).

Qualifications

• 5+ years in DevSecOps/DevOps with a focus on production AWS environments.
• Proven experience building enterprise-grade CI/CD pipelines and deep code security tooling know-how.
• Hands-on expertise with Amazon EKS, Helm, and declarative state management.
• Strong IaC skills with Terraform and state management for secure networking.
• Knowledge of NIST SP 800-53, FedRAMP, or DoD RMF in GovCloud environments.

Responsibilities

• Secure Infrastructure: Design hardened AWS GovCloud environments using Terraform.
• Kubernetes & GitOps: Manage EKS clusters, Helm, and declarative deployments with Argo CD / Flux.
• Secure CI/CD: Build pipelines with GitHub Actions or GitLab CI/CD; integrate GHAS and CodeQL.
• ML Workload Support: Deploy and scale containerized ML models and data pipelines.

Skills

DevSecOps / DevOps

GitHub Actions

GitLab CI/CD

Terraform

Kubernetes (EKS)

Security tooling (GHAS, CodeQL)

Python / Bash scripting

NIST 800-53 / FedRAMP

Education

Bachelor's degree in IT / CS / Eng

Tools

GitHub Actions

GitLab CI/CD

Argo CD

Flux

CodeQL

Terraform

Kubernetes

Job description

Pantheon Data is seeking a Senior AWS DevSecOps Engineer to design and operate secure, cloud-native platforms in AWS GovCloud, focusing on ML workloads and data processing with CUI/PII/PHI. You will automate gated security controls across CI/CD pipelines and administer production-grade EKS clusters using GitOps.

The role requires 5+ years in DevSecOps, Terraform, GitHub Actions or GitLab CI, and compliance knowledge (NIST 800-53, FedRAMP).