Senior DevSecOps Engineer: Cloud, Security & Compliance

Fort Health; Leesburg (VA); On-site; USD 155,000 - 205,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K plan with match

Short-term disability

Long-term disability

AD&D and life insurance

Flex time off

Annual bonuses

Training stipends

Certification reimbursements

Access to 30,000 online training

Cell phone allowance

Home office stipend

Spot awards

Eleven paid holidays

Job summary

Fortreum is seeking a DevSecOps Engineer to deploy and operationalize Kovr AI Platform for federal and enterprise customers. You will embed with client environments, build integrations with their DevSecOps toolchains, automate evidence collection, and enable continuous monitoring to accelerate compliance.

You will serve as the hands-on technical bridge between customers and Kovr’s engineering teams, solving complex deployment challenges across cloud, hybrid, and classified IC environments with a

Qualifications

• 7+ years of DevOps, Platform Engineering, or Site Reliability Engineering experience.
• Hands-on experience architecting AWS infrastructure using Terraform at scale.
• Strong production experience with Kubernetes (EKS or similar), including cluster design, Helm Charts, and GitHub/GitOps workflows.
• Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments.
• Familiarity with OSCAL or other machine-readable compliance/documentation frameworks.
• Experience integrating SAST/DAST or IaC security scanning into a pipeline.
• Scripting/automation proficiency (Python, Bash, or similar).
• U.S. Citizenship, with the ability to obtain and maintain a Top Secret clearance, due to contractual requirements.
• Local to Washington, DC metro area

Responsibilities

• Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery.
• Manage cloud infrastructure (AWS, with exposure to Azure/GCP) using Infrastructure as Code (Terraform), including module design and reusable patterns for the broader team.
• Administer and scale containerized workloads (Kubernetes/EKS, Helm, ArgoCD).
• Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks.
• Design observability strategy (logging, metrics, alerting, SLOs) to support production reliability at scale.
• Integrate DevOps tooling (GitHub, JIRA, Splunk, Snyk) into automated compliance and remediation workflows.
• Collaborate with existing engineering and compliance teams to ensure infrastructure changes maintain continuous authorization posture.
• Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping.
• Troubleshoot production issues and drive continuous improvement in deployment reliability.
• Build and maintain documentation, runbooks, and architecture decision records.
• Represent infrastructure/security in cross-functional planning, including customer-facing technical conversations when needed

Skills

DevSecOps

AWS Infrastructure

Kubernetes (EKS)

Terraform

GitOps

Scripting (Python/Bash)

FedRAMP/NIST/CMMC

DoD compliance

Security automation

Top Secret clearance

Tools

Terraform

Kubernetes

ArgoCD

Helm

GitHub

Snyk

Splunk

JIRA

OSCAL

Job description

Fortreum is seeking a DevSecOps Engineer to deploy and operationalize Kovr AI Platform for federal and enterprise customers. You will embed with client environments, build integrations with their DevSecOps toolchains, automate evidence collection, and enable continuous monitoring to accelerate compliance.

You will serve as the hands-on technical bridge between customers and Kovr’s engineering teams, solving complex deployment challenges across cloud, hybrid, and classified IC environments with a