Senior DevSecOps Engineer: GovCloud GitLab CI/CD

Pantheon-Data; Reston (VA); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

SmartBenefits through Washington Metro

Tuition assistance

Job summary

Pantheon Data in Reston, VA is seeking a Senior DevSecOps Engineer to design, build, and operate secure, cloud-native platforms in AWS GovCloud supporting ML-enabled workloads that process sensitive data. You will own our GitLab CI/CD architecture end-to-end and lead migration of repos and pipelines to GitLab Ultimate.

The role combines secure pipeline engineering with platform operations: IaC, EKS with GitOps, and compliance with NIST 800-53, FedRAMP and DoD SRG while keeping delivery fast.

Qualifications

• Bachelor’s degree in a technical field (ABET-accredited preferred).
• 5+ years of DevSecOps/DevOps with production AWS experience.
• Deep GitLab expertise including CI/CD design and security features.
• Experience implementing gated DevSecOps controls in CI/CD pipelines.
• Hands-on AWS EKS experience with GitOps and Terraform.

Responsibilities

• Design, implement, and operate GitLab CI/CD pipelines at scale.
• Deploy, configure, and tune GitLab Ultimate security suite as pipeline gates.
• Enforce policy-as-code and compliance automation across projects.
• Manage SBOMs, dependency and license policies, and artifact signing.
• Architect and operate GitLab Runners in GovCloud; enable secure identity via OIDC.

Skills

GitLab CI/CD

GitLab Ultimate security

Terraform

Kubernetes

AWS GovCloud

EKS

GitOps

NIST 800-53 / FedRAMP / DoD SRG

Python / Bash scripting

SBOM & software supply chain

Education

ABET-accredited university degree

Tools

GitLab

Kubernetes

Argo CD / Flux

Terraform

EKS

CycloneDX SBOM

Job description

Pantheon Data in Reston, VA is seeking a Senior DevSecOps Engineer to design, build, and operate secure, cloud-native platforms in AWS GovCloud supporting ML-enabled workloads that process sensitive data. You will own our GitLab CI/CD architecture end-to-end and lead migration of repos and pipelines to GitLab Ultimate.

The role combines secure pipeline engineering with platform operations: IaC, EKS with GitOps, and compliance with NIST 800-53, FedRAMP and DoD SRG while keeping delivery fast.