Senior DevSecOps Engineer — Hybrid (VA) with AWS & GitHub Actions

GovCIO; Merrifield (VA); Hybrid; USD 130,000 - 170,000; Full time

Job summary

GovCIO is seeking a Senior DevSecOps Engineer to support the DEA Bluestone contract in a hybrid Arlington/Merrifield, VA role. You will design and maintain CI/CD pipelines, IAAC pipelines in Terraform for AWS and Azure Gov Cloud, and manage container workloads on EKS/ECS Fargate.

The ideal candidate has 5–8 years in DevSecOps, strong GitHub Actions experience, and knowledge of security tooling, NCC/NTF mappings, and Agile SDLC practices. Active Secret clearance required.

Qualifications

• High School with 10+ years or commensurate experience.
• 5–8 years DevSecOps/engineering experience.
• Production experience with GitHub Actions building reusable, multi-team pipelines.
• Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).
• Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
• Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).
• Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
• Agile SDLC experience.

Responsibilities

• Design, author, and maintain CI/CD pipelines in GitHub Actions and reusable workflows.
• Operate and integrate platform toolchain: GitHub Enterprise, SonarQube, Nexus IQ/Firewall, and container scanning.
• Build and maintain Terraform modules and IaC pipelines for workloads in AWS and Azure Gov Cloud.
• Enforce Checkov scanning in IaC pipelines and remediate policy violations in code.
• Deploy and manage DSOP GitHub Runners in cloud accounts.
• Operate containerized workloads on Amazon EKS/ECS Fargate and Rancher for multi-cluster management.
• Advance the service mesh and observability stack (Istio, Kiali, Jaeger, Dynatrace) toward org-wide use.

Skills

DevSecOps

Agile SDLC

Scripting (Python/Go/Bash/PowerShell)

Security tooling integration

Education

High School with 10+ years experience

Tools

GitHub Actions

Terraform

Kubernetes (EKS)

Istio

Job description

GovCIO is seeking a Senior DevSecOps Engineer to support the DEA Bluestone contract in a hybrid Arlington/Merrifield, VA role. You will design and maintain CI/CD pipelines, IAAC pipelines in Terraform for AWS and Azure Gov Cloud, and manage container workloads on EKS/ECS Fargate.

The ideal candidate has 5–8 years in DevSecOps, strong GitHub Actions experience, and knowledge of security tooling, NCC/NTF mappings, and Agile SDLC practices. Active Secret clearance required.