Senior DevSecOps Engineer

GovCIO; Fairfax, Arlington (VA, VA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

GovCIO is hiring a Senior DevSecOps Engineer for the DEA Bluestone contract. The role is based in Arlington or Merrifield, VA and offers a hybrid work model.

You will design and maintain CI/CD pipelines using GitHub Actions, integrate GitHub Enterprise tools, and provision workloads on AWS GovCloud via Terraform IaC. Strong security scanning and compliance experience are required.

Qualifications

• 5–8 years DevSecOps/engineering experience.
• Production experience with GitHub Actions building reusable pipelines.
• Strong Terraform skills and hands‑on AWS experience; Kubernetes (EKS) experience.
• Knowledge of SAST/SCA/secret scanning tooling in pipelines.
• Proficiency in Python, Go, Bash, or PowerShell.
• Familiarity with NIST 800-53 and mapping controls to evidence.
• Agile SDLC experience.

Responsibilities

• Design, author, and maintain CI/CD pipelines in GitHub Actions.
• Operate and integrate GitHub Enterprise and related security tooling.
• Build Terraform modules and IaC to provision workloads in AWS/Azure Gov.
• Enforce scanning checks in pipelines and remediate policy violations.
• Deploy DSOP GitHub Runners and manage EKS/ECS workloads.
• Advance service mesh and observability with Istio, Kiali, Dynatrace.
• Support continuous ATO/compliance and FISMA artifacts.

Skills

DevSecOps

GitHub Actions

Terraform

AWS

Kubernetes

SAST/SCA/secret scanning

Scripting (Python/Go/Bash/PowerShell)

Agile SDLC

NIST SP 800-53

Education

High School with 10+ years (or commensurate experience)

Tools

GitHub Enterprise

GitHub Advanced Security

SonarQube

Nexus/FW/Nexus IQ

Terraform IaC Pipelines

AWS Gov Cloud

Job description

GovCIO is currently hiring for a Senior DevSecOps Engineer to support our DEA Bluestone contract

This position is located in either Arlington or Merrifield, VA and is a hybrid position.

Responsibilities

• Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories.


• Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.


• Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.


• Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.


• Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.


• Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.


• Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.

Qualifications

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• 5–8 years DevSecOps/engineering experience.


• Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.


• Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).


• Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.


• Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).


• Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.


• Agile SDLC experience.

Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability

Preferred Skills and Experience

• Azure Government Cloud experience alongside AWS.


• Istio, Rancher, Dynatrace, or Nexus IQ administration.


• Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.


• Test automation and performance testing exposure (LEAPWORK, JMeter).


• Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate.

Posted Salary Range

USD $130,000.00 - USD $170,000.00 /Yr.