Senior DevSecOps Engineer: Cloud & Compliance Automation

Fortreum; Leesburg (VA); On-site; USD 155,000 - 205,000; Full time

Benefits offered by this job

Medical Insurance

401K with match

Paid time off

Job summary

Fortreum is seeking a DevSecOps Engineer to embed with federal and enterprise customers, deploying and operationalizing the Kovr AI Platform across cloud, hybrid, and classified environments. You will integrate with client toolchains, automate evidence collection, and configure compliance workflows to accelerate Authority to Operate (ATO).

You will bridge customers and Kovr’s engineering teams to solve deployment challenges.

Qualifications

• 7+ years of DevOps, Platform Engineering, or SRE experience.
• Hands-on experience architecting AWS infrastructure using Terraform at scale.
• Strong production experience with Kubernetes (EKS or similar).
• Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments.
• Familiarity with OSCAL or other machine-readable compliance frameworks.
• Experience integrating SAST/DAST or IaC security scanning into a pipeline.
• Scripting/automation proficiency (Python, Bash, or similar).
• U.S. Citizenship, with the ability to obtain and maintain a Top Secret clearance.
• Local to Washington, DC metro area.

Responsibilities

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery.
• Manage cloud infrastructure (AWS, with exposure to Azure/GCP) using Terraform.
• Administer and scale containerized workloads (Kubernetes/EKS, Helm, ArgoCD).
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks.
• Design observability strategy (logging, metrics, alerting, SLOs) to support production reliability at scale.
• Integrate DevOps tooling (GitHub, JIRA, Splunk, Snyk) into automated compliance and remediation workflows.
• Collaborate with engineering and compliance teams to ensure infrastructure changes maintain continuous authorization posture.
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping.
• Troubleshoot production issues and drive continuous improvement in deployment reliability.
• Build and maintain documentation, runbooks, and architecture decision records.
• Represent infrastructure/security in cross-functional planning, including customer-facing conversations.

Skills

DevOps

Terraform

Kubernetes

GitHub/GitOps

Python/Bash

Security clearance

Tools

Terraform

Kubernetes

Helm

ArgoCD

Jira

Splunk

Snyk

Job description

Fortreum is seeking a DevSecOps Engineer to embed with federal and enterprise customers, deploying and operationalizing the Kovr AI Platform across cloud, hybrid, and classified environments. You will integrate with client toolchains, automate evidence collection, and configure compliance workflows to accelerate Authority to Operate (ATO).

You will bridge customers and Kovr’s engineering teams to solve deployment challenges.