Senior DevSecOps Engineer – AWS, CI/CD & Terraform

ScolerTec Inc; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

ScolerTec Inc. is seeking a Senior DevSecOps Engineer to support a federal cloud modernization program. You will design secure CI/CD pipelines, automate deployments, and enforce IaC security across cloud environments.

The ideal candidate has 5+ years of DevSecOps experience with strong AWS, Terraform, Kubernetes, and security tooling expertise, plus scripting in Python or Bash. You will collaborate with security, development, and operations teams.

Qualifications

• 5+ years in systems engineering, software development, DevOps, DevSecOps, or related roles.
• Bachelor’s degree in Computer Science, Software Engineering, Engineering, or related field.
• Strong hands-on experience designing and supporting enterprise CI/CD pipelines.
• Strong experience with AWS cloud environments and cloud infrastructure automation.
• Hands-on Infrastructure as Code experience using Terraform, CloudFormation, ARM/Bicep, or similar.
• Strong understanding of cloud security, IAM, encryption, network security, secrets management, and compliance controls.
• Scripting experience using Python, Bash, Ruby, or Perl.
• Experience with Jenkins, GitLab CI/CD, GitHub Actions, or Azure DevOps.
• Experience with Docker, Kubernetes, and containerized workloads.
• Experience integrating security tools and controls into DevOps pipelines.
• Experience supporting cloud migrations, modernization initiatives, or enterprise-scale cloud environments.

Responsibilities

• Design, build, maintain, and optimize secure CI/CD pipelines for automated build, testing, security scanning, and deployment.
• Embed security, compliance, monitoring, and vulnerability management throughout the DevSecOps lifecycle.
• Automate cloud infrastructure provisioning and configuration using Terraform, CloudFormation, ARM/Bicep, or similar IaC technologies.
• Integrate SAST, DAST, dependency scanning, container scanning, and vulnerability management into CI/CD pipelines.
• Ensure source code and IaC changes are version-controlled, peer-reviewed, security-scanned, and governed through appropriate change-control gates.
• Implement and maintain cloud security controls including IAM, secrets management, encryption, network security, and policy enforcement.
• Develop policy-as-code guardrails and automated compliance checks.
• Conduct security reviews, threat modeling, vulnerability assessments, and remediation activities for cloud infrastructure and pipelines.
• Monitor cloud environments for security events, configuration issues, and compliance drift.
• Support artifact management, release engineering, configuration management, deployment automation, and environment provisioning.
• Develop automation and tooling using Python, Bash, or similar scripting languages.
• Support containerized applications and Kubernetes-based workloads.
• Collaborate with application development, infrastructure, operations, governance, and security teams.
• Support incident response involving infrastructure, CI/CD pipelines, security controls, and deployments.
• Develop technical documentation and provide guidance and mentoring on DevSecOps, secure software delivery, and IaC standards.

Skills

Security-first DevSecOps

CI/CD pipelines

AWS cloud environments

Terraform

Kubernetes

SAST/DAST integration

Python / Bash scripting

Cloud security controls

Vulnerability scanning

Git / version control

Education

Bachelor’s degree in Computer Science, Software Engineering, Engineering, or related field

Tools

Terraform

CloudFormation

ARM/Bicep

Jenkins

GitHub Actions

GitLab CI/CD

Azure DevOps

Docker

Kubernetes

Job description

ScolerTec Inc. has multiple openings for Senior DevSecOps Engineer – AWS, CI/CD & Terraform to support a large-scale federal cloud modernization program.

The successful candidate will be responsible for automating software delivery, deployment pipelines, infrastructure provisioning, configuration, security controls, and operational processes across cloud-based data environments. This role requires a strong security-first DevSecOps background, with hands-on experience integrating security throughout the software and infrastructure lifecycle.

The ideal candidate will have strong experience with AWS, CI/CD pipelines, Infrastructure as Code, Terraform, Kubernetes, automated security scanning, scripting, and cloud security controls.

Key Responsibilities

• Design, build, maintain, and optimize secure CI/CD pipelines for automated build, testing, security scanning, and deployment.
• Embed security, compliance, monitoring, and vulnerability management throughout the DevSecOps lifecycle.
• Automate cloud infrastructure provisioning and configuration using Terraform, CloudFormation, ARM/Bicep, or similar IaC technologies.
• Integrate SAST, DAST, dependency scanning, container scanning, and vulnerability management into CI/CD pipelines.
• Ensure source code and IaC changes are version-controlled, peer-reviewed, security-scanned, and governed through appropriate change-control gates.
• Implement and maintain cloud security controls including IAM, secrets management, encryption, network security, and policy enforcement.
• Develop policy-as-code guardrails and automated compliance checks.
• Conduct security reviews, threat modeling, vulnerability assessments, and remediation activities for cloud infrastructure and pipelines.
• Monitor cloud environments for security events, configuration issues, and compliance drift.
• Support artifact management, release engineering, configuration management, deployment automation, and environment provisioning.
• Develop automation and tooling using Python, Bash, or similar scripting languages.
• Support containerized applications and Kubernetes-based workloads.
• Collaborate with application development, infrastructure, operations, governance, and security teams.
• Support incident response involving infrastructure, CI/CD pipelines, security controls, and deployments.
• Develop technical documentation and provide guidance and mentoring on DevSecOps, secure software delivery, and IaC standards.

Qualifications

• 5+ years of experience in systems engineering, software development, DevOps, DevSecOps, cloud engineering, or related technical roles.
• Bachelor’s degree in Computer Science, Software Engineering, Engineering, or related field.
• Strong hands-on experience designing and supporting enterprise CI/CD pipelines.
• Strong experience with AWS cloud environments and cloud infrastructure automation.
• Hands-on Infrastructure as Code experience using Terraform, CloudFormation, ARM/Bicep, or similar technologies.
• Strong understanding of cloud security, IAM, encryption, network security, secrets management, and compliance controls.
• Strong scripting experience using Python, Bash, Ruby, Perl, or similar languages.
• Experience with CI/CD technologies such as Jenkins, GitLab CI/CD, GitHub Actions, or Azure DevOps.
• Experience with Docker, Kubernetes, and containerized workloads.
• Experience integrating security tools and controls into DevOps pipelines.
• Experience supporting cloud migrations, modernization initiatives, or enterprise-scale cloud environments.

Must Have

• AWS
• DevSecOps
• CI/CD
• Terraform / Infrastructure as Code
• Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps
• SAST / DAST integration
• Vulnerability and dependency scanning
• Docker and Kubernetes
• Python or Bash scripting
• IAM and cloud security
• Git
• Automated infrastructure provisioning

Nice to Have

• Ansible
• SonarQube
• Fortify
• Maven
• Bamboo
• Artifact repository/release management experience
• Multi-cloud or hybrid-cloud experience
• Cloud migration experience
• Policy-as-code implementation
• NIST or other federal security/compliance experience

Preferred Certifications

• AWS Certified Solutions Architect – Professional
• AWS SysOps
• Docker Certified Associate
• Professional DevSecOps certification
• Other relevant AWS, cloud security, Kubernetes, or DevSecOps certifications.

Communication & Organizational Skills

• Strong written and verbal communication skills.
• Ability to work effectively across development, security, operations, and infrastructure teams.
• Ability to explain security and DevSecOps concepts to both technical and non-technical stakeholders.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to mentor engineers and establish repeatable DevSecOps standards.