Senior DevSecOps Engineer — AWS GovCloud Security

Momentum Engineering, Inc; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Company sponsored group medical plan

Company paid dental

Vision insurance

Life insurance

STD/LTD plans

Job summary

Momentum Engineering, Inc. seeks a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud.

This hybrid role requires expertise in DevSecOps, cloud automation, security compliance, and CI/CD to enhance security, scalability, and efficiency of mission-critical applications. You will design secure GovCloud environments, build pipelines, enforce frameworks like NIST and RMF, and automate infrastructure with Terraform, CloudFormation, and Ansible.

Qualifications

• US citizenship with ability to obtain a successful DoD Secret security clearance.
• Security+ Certification.
• 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles.
• Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
• Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar).
• Hands-on experience with Infrastructure as Code (IaC) using Terraform, CloudFormation, and Ansible.
• Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate).
• Strong understanding of AWS security services (IAM, GuardDuty, Security Hub, KMS, WAF, Config, Secrets Manager).
• Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs, ZeroTrust).
• Experience implementing automated security testing (SAST, DAST, vulnerability scanning).
• Proficiency in scripting (Python, Bash, PowerShell) for automation and security enforcement.

Responsibilities

• AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable AWS GovCloud environments for DoD and Civilian agency applications.
• DevSecOps Pipeline Development: Build and optimize CI/CD pipelines using GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security compliance.
• Security & Compliance: Ensure adherence to Federal cybersecurity frameworks (NIST 800‑171, NIST 800‑53, RMF, FedRAMP, Zero Trust); implement STIGs and automated security scanning.
• Infrastructure as Code (IaC): Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible.
• Containerization & Orchestration: Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, leveraging services like Amazon EKS, ECS, and Fargate.
• Monitoring & Incident Response: Implement AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK for monitoring and compliance reporting.
• Automation & Scripting: Develop automation scripts using Python, Bash, or PowerShell to improve deployment efficiency and security enforcement.
• Collaboration & Knowledge Sharing: Work with software developers, cybersecurity teams, and cloud engineers to integrate security into the SDLC.

Skills

DevSecOps

Cloud engineering

CI/CD

IaC

Containerization

Security compliance

Scripting

Collaboration

Tools

GitLab CI/CD

Jenkins

AWS Code Pipeline

Terraform

CloudFormation

Ansible

Docker

Kubernetes

EKS/ECS/Fargate

Python

Job description

Momentum Engineering, Inc. seeks a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud.

This hybrid role requires expertise in DevSecOps, cloud automation, security compliance, and CI/CD to enhance security, scalability, and efficiency of mission-critical applications. You will design secure GovCloud environments, build pipelines, enforce frameworks like NIST and RMF, and automate infrastructure with Terraform, CloudFormation, and Ansible.