Senior AWS DevSecOps Engineer - Remote GovCloud

Pantheon Data; Reston (VA); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

SmarTrip pre-tax benefits

Tuition assistance

Job summary

Pantheon Data is seeking a Senior AWS DevSecOps Engineer to design and operate secure cloud-native platforms in AWS GovCloud for ML workloads containing regulated data. The role emphasizes gated security controls in CI/CD and production-grade EKS clusters managed with GitOps.

You will automate security gates with GHAS or GitLab CI/CD, implement Terraform-based infrastructure, and ensure compliance with NIST 800-53, FedRAMP, and DoD RMF, while collaborating remotely with cross-functional teams.

Qualifications

• 5+ years in DevSecOps/DevOps with production AWS environments.
• Experience building enterprise-grade CI/CD pipelines (GitHub Actions or GitLab CI/CD).
• Deep Kubernetes/EKS knowledge and Helm packaging.
• Terraform for complex networking and security stacks.
• Familiarity with NIST 800-53, FedRAMP or DoD RMF in GovCloud.
• Scripting in Python or Bash for automation and security tooling.
• AWS Certified DevOps Engineer or Security - Specialty preferred.

Responsibilities

• Design hardened AWS GovCloud environments aligned with NIST/FedRAMP baselines.
• Manage lifecycle and security of Amazon EKS clusters; implement GitOps (Argo CD/Flux).
• Build robust CI/CD pipelines using GitHub Actions or GitLab CI/CD with GHAS/CodeQL.
• Deploy and scale containerized ML workloads in regulated environments.

Skills

DevSecOps

AWS

CI/CD

GitHub Actions

GitLab CI/CD

Kubernetes

Amazon EKS

Terraform

Argo CD

FedRAMP

NIST 800-53

DoD RMF

CodeQL

Python

Bash

GHAS

Security

Remote work

Education

Bachelor's degree

Tools

Argo CD

Flux

GitHub Advanced Security

CodeQL

Job description

Pantheon Data is seeking a Senior AWS DevSecOps Engineer to design and operate secure cloud-native platforms in AWS GovCloud for ML workloads containing regulated data. The role emphasizes gated security controls in CI/CD and production-grade EKS clusters managed with GitOps.

You will automate security gates with GHAS or GitLab CI/CD, implement Terraform-based infrastructure, and ensure compliance with NIST 800-53, FedRAMP, and DoD RMF, while collaborating remotely with cross-functional teams.