Senior Cloud/DevSecOps Engineer

Eastbay Systems, LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Three weeks of paid time off

Paid Federal holidays

401(k) retirement plan with employer 


Additional employer-sponsored benefits

Job summary

EastBay Systems in Washington, DC is seeking a Senior Cloud / DevSecOps Engineer to join our security engineering team supporting a Federal hybrid-cloud environment. This is a hands-on role focused on secure cloud platforms, CI/CD security, automation, and secure software delivery.

You will collaborate with development, cloud, SOC, and GRC teams to improve security across the development and deployment lifecycle, solve complex problems, and work independently while aligning with client

Qualifications

• 7+ years of experience in DevSecOps, cloud engineering, cybersecurity engineering, software engineering, or related technical role.
• Hands-on experience with Azure and/or AWS.
• Experience securing CI/CD pipelines and software development processes.
• Experience with application-security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or IaC scanning.
• Experience with Azure DevOps, GitHub, GitLab, Jenkins, or similar CI/CD platforms.
• Experience with PowerShell, Python, REST APIs, or similar scripting and automation technologies.
• Working knowledge of cloud networking, identity, logging, and security controls.
• Experience with Microsoft Sentinel or a comparable SIEM platform.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently while collaborating effectively across technical teams.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.
• Ability to work onsite 2 days per week and transition to 5 days onsite if required by the client.

Responsibilities

• Integrate security into CI/CD pipelines and software development processes.
• Support SAST, DAST, SCA, secrets scanning, container scanning, and IaC security testing.
• Work with developers to identify and remediate application, API, dependency, and cloud-security issues.
• Support secure application deployments across Azure and AWS.
• Assist with cloud security configuration, identity, access controls, logging, monitoring, and vulnerability remediation.
• Support Microsoft Entra ID, Conditional Access, RBAC, PIM, and least-privilege access.
• Develop security automation using PowerShell, Python, Azure Logic Apps, REST APIs, JSON, or similar technologies.
• Integrate application and cloud telemetry with Microsoft Sentinel and enterprise monitoring platforms.
• Participate in cloud and application security architecture reviews.

Skills

Azure

AWS

DevSecOps

CI/CD security

SAST

DAST

SCA

IaC security

PowerShell

Python

REST APIs

Microsoft Sentinel

SIEM

Jenkins

GitHub

GitLab

Azure DevOps

Cloud security architecture

Education

Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or related technical field

Tools

Terraform

Docker

Kubernetes

OpenShift

Microsoft Defender for Cloud

Defender XDR

Job description

Job Description

EastBay Systems is a cybersecurity and IT consulting firm supporting Federal civilian agencies. Our services include Cloud Security, DevSecOps, Security Engineering, SOC Operations, GRC, and Continuous Monitoring.

About the Role

We are seeking a Senior Cloud / DevSecOps Engineer to join an established cybersecurity engineering team supporting a Federal hybrid-cloud environment. This is a hands‑on role focused on secure cloud environments, CI/CD security, application security, automation, and secure software delivery. You will work closely with development, cloud, security engineering, SOC, and GRC teams to improve security throughout the development and deployment lifecycle. We are looking for someone who can contribute quickly, solve complex technical problems, and work independently without being expected to own every aspect of the security environment.

What You’ll Do

• Integrate security into CI/CD pipelines and software development processes.
• Support SAST, DAST, SCA, secrets scanning, container scanning, and Infrastructure-as-Code security testing.
• Work with developers to identify and remediate application, API, dependency, and cloud-security issues.
• Support secure application deployments across Azure and AWS.
• Assist with cloud security configuration, identity, access controls, logging, monitoring, and vulnerability remediation.
• Support Microsoft Entra ID, Conditional Access, RBAC, PIM, and least-privilege access.
• Develop security automation using PowerShell, Python, Azure Logic Apps, REST APIs, JSON, or similar technologies.
• Integrate application and cloud telemetry with Microsoft Sentinel and enterprise monitoring platforms.
• Participate in cloud and application security architecture reviews.

Position Requirements

• 7+ years of experience in DevSecOps, cloud engineering, cybersecurity engineering, software engineering, or a related technical role.
• Hands‑on experience with Azure and/or AWS.
• Experience securing CI/CD pipelines and software development processes.
• Experience with application‑security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or IaC scanning.
• Experience with Azure DevOps, GitHub, GitLab, Jenkins, or similar CI/CD platforms.
• Experience with PowerShell, Python, REST APIs, or similar scripting and automation technologies.
• Working knowledge of cloud networking, identity, logging, and security controls.
• Experience with Microsoft Sentinel or a comparable SIEM platform.
• Strong troubleshooting and problem‑solving skills.
• Ability to work independently while collaborating effectively across technical teams.
• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.
• Ability and willingness to work onsite 2 days per week and transition to 5 days onsite if required by the client.

Nice to Have

• Terraform or other Infrastructure‑as‑Code experience.
• Docker, Kubernetes, OpenShift, or other container‑platform experience.
• Microsoft Defender for Cloud or Defender XDR experience.
• Federal cybersecurity experience supporting FISMA, RMF, FedRAMP, or NIST requirements.
• CISSP, CCSP, AZ‑500, AWS Security Specialty, or similar certifications.

Benefits

• Medical, dental, and vision insurance
• Three weeks of paid time off
• Paid Federal holidays
• 401(k) retirement plan with employer contribution
• Additional employer-sponsored benefits in accordance with company policy

Equal Employment Opportunity

EastBay Systems is an Equal Opportunity Employer. Employment decisions are based on qualifications, merit, business needs, and job‑related requirements.

We do not discriminate on the basis of race, color, ethnicity, national origin, religion, sex, pregnancy, sexual orientation, gender identity or expression, age, disability, genetic information, protected veteran status, marital status, or any other characteristic protected by applicable Federal, state, or local law.