Senior DevSecOps Engineer

International Executive Service Corps; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

NuAxis seeks a Senior DevSecOps Engineer to integrate security into CI/CD pipelines, cloud environments, and development workflows. You will own pipeline architecture, automated security gating, and infrastructure-as-code standards.

Responsibilities include SAST/DAST, SCA, container image scanning, secrets management, and IaC provisioning. You will guide teams on secure delivery and shift-left practices while supporting ATO and continuous monitoring.

Qualifications

• Bachelor's degree in IT, CS, or Cybersecurity.
• 5–8 years of DevSecOps/DevOps experience.
• One current certification: AWS Security, Azure Security, CKA, or CompTIA Security+.
• Post-hire certs: CKS or Terraform Associate within 180 days.
• Preferred: CISSP or CDP; AWS/Azure DevOps Engineer Expert.

Responsibilities

• Design, build, and maintain CI/CD pipelines with embedded security gates.
• Implement SAST/DAST, SCA, container and IaC scanning across the toolchain.
• Manage secrets, credentials, certificates, and privileged access.
• Author and maintain infrastructure-as-code for reproducible environments.
• Instrument monitoring, logging, and alerting for visibility.
• Support ATO, continuous monitoring, and security evidence generation.
• Coach development teams on secure delivery and shift-left practices.

Skills

CI/CD security

SAST/DAST

Container security

Secrets management

IaC scanning

Pipeline automation

Cloud security

Shift-left practices

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

Terraform

Ansible

Docker

Kubernetes

Helm

SonarQube

Fortify

Checkmarx

OWASP ZAP

Burp Suite

Snyk

Trivy

Anchore

HashiCorp Vault

AWS Secrets Manager

Job description

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.

Technology is our Passion. People are our Purpose.

We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it’s a state of mind.

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a Senior DevSecOps Engineer for a Full-Time position.

Job Summary:

Integrates security into CI/CD pipelines, cloud environments, and development workflows so teams can deliver software quickly and safely. Owns pipeline architecture, automated security gating, and infrastructure-as-code standards.

Key Responsibilities

• Design, build, and maintain CI/CD pipelines with embedded security gates.
• Implement SAST, DAST, SCA, container image scanning, and infrastructure-as-code scanning across the toolchain.
• Manage secrets, credentials, certificates, and privileged access within automated workflows.
• Author and maintain infrastructure-as-code for repeatable, auditable environment provisioning.
• Instrument monitoring, logging, and alerting to support operational and security visibility.
• Support ATO, continuous monitoring, and security control evidence generation.
• Coach development teams on secure delivery practices and shift-left adoption.

Minimum Qualifications

• Minimum Education: Bachelor's degree in Information Technology, Computer Science, or Cybersecurity.
• Minimum Experience: Five (5) to eight (8) years of DevSecOps or DevOps engineering experience.
• Certifications — Required: One current certification among: AWS Certified Security - Specialty, Microsoft Certified Azure Security Engineer Associate, Certified Kubernetes Administrator (CKA), or CompTIA Security+.
• Certifications — Obtainable After Hire: Certified Kubernetes Security Specialist (CKS) or HashiCorp Certified: Terraform Associate, within 180 days of assignment.
• Certifications — Preferred: CISSP; Certified DevSecOps Professional (CDP); AWS or Azure DevOps Engineer Expert.
• Required Skills: CI/CD security; SAST and DAST; container security; secrets management; infrastructure-as-code scanning; pipeline automation; cloud security configuration.
• Preferred Skills: Kubernetes and container orchestration; cloud-native monitoring; federal ATO and continuous monitoring support.

Technical Environment

Jenkins, GitHub Actions, GitLab CI, and Azure DevOps Pipelines; Terraform and Ansible; Docker, Kubernetes, and Helm; SonarQube, Fortify, and Checkmarx for SAST; OWASP ZAP and Burp Suite for DAST; Snyk, Trivy, and Anchore for software composition and image scanning; HashiCorp Vault and AWS Secrets Manager; Splunk and the ELK Stack; Prometheus and Grafana; AWS and Azure; NIST SP 800-53 control mapping and continuous monitoring evidence.

Our Profile:

We are an IT company with a unique mission—to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed.Time after time, programs failed because the focus was on the tools and products and not the people using them.

about our Benefits and Culture!

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation.