Senior DevSecOps Engineer - Reston, VA

MSCCN; Reston (VA); On-site; USD 121,000 - 189,000; Full time

Job summary

Noblis is seeking a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions. You will embed security into the DevOps lifecycle and collaborate across development, operations, and security teams to promote a culture of shared accountability for security.

The ideal candidate has hands-on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and mentoring junior

Qualifications

• US Citizenship is required.
• Active TS/SCI with Polygraph.
• Bachelor’s or Master’s degree with 7+ years of related experience; OR Associate’s with 11 years; OR HS diploma with 14 years.
• Proficiency in Python and scripting for automation.
• Familiarity with GitLab CI/GitHub Actions, Kubernetes/EKS, and Terraform/Ansible.
• Experience with cloud security in AWS/Azure/GCP and cloud-native security practices.
• Ability to identify vulnerabilities and translate complex tech into actionable guidance.

Responsibilities

• Designing, building, maintaining, and optimizing CI/CD pipelines with automation, security scans, and deployment.
• Integrating automated testing, security scanning, and compliance validation into pipelines.
• Developing IaC with Terraform or CloudFormation and enforcing security guardrails.
• Implementing security for Docker, Kubernetes, and EKS with policy-as-code and runtime security.
• Designing and enforcing AWS/Azure security guardrails, IAM least-privilege, network controls, encryption.
• Operationalizing vulnerability management across applications and infrastructure.
• Translating security requirements into automated controls and audit-ready evidence.
• Ensuring compliance with security policies and mentoring teams on secure DevSecOps practices.

Skills

Python

Scripting (Bash)

Security mindset

Mentoring junior engineers

Education

Bachelor’s or Master’s degree in a related field

Tools

GitLab CI

GitHub Actions

Kubernetes

EKS

Terraform

Ansible

Job description

The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers.

This role is "On-Site".

Responsibilities

Noblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.

In this role, you will embed security practices into the DevOps lifecycle, ensuring security is integrated at every stage of software development. You’ll collaborate across development, operations, and security teams to close gaps and promote a culture of shared accountability for security.

The ideal candidate brings hands‑on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers.

Posted Salary Range USD $120,700.00 - USD $188,725.00 /Yr.

Job Responsibilities:

• Designing, building, maintaining, and optimizing CI/CD pipelines supporting automated build, test, security scan, and deployment processes.
• Integrating automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery practices.
• Developing and managing IaC using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
• Implementing security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
• Partnering with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.
• Operationalizing vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
• Translating security compliance requirements into automated security controls and audit-ready evidence.
• Ensuring that all software development and deployment processes comply with relevant security policies, standards, and regulations.
• Acting as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.

Required Experience

Required Qualifications

• US Citizenship is required
• Active Top-Secret SCI (TS/SCI) with Polygraph
• Bachelor’s OR Master’s degree with 7 years of related experience; OR associate’s degree with 11 years of related experience; OR High School diploma/GED with 14 years of related experience.
• Proficiency in programming languages such as Python, and scripting languages for automation tasks (e.g., Bash).
• Familiarity with CI/CD tools (e.g., GitLab CI, GitHub Actions), container orchestration (e.g., Kubernetes, EKS), and infrastructure as code (e.g., Terraform, Ansible).
• Skills in security cloud environments, including cloud service providers (e.g., AWS, Azure, GCP), and understanding of cloud‑native security tools and practices.
• Ability to identify security issues and vulnerabilities and develop effective solutions.
• Ability to distill technical complexities into actionable guidance for development teams.

Preferred Experience

Desired Qualifications

• AWS Certification , including AWS Certified DevOps Engineer or AWS Certified Solutions Architect Certification
• Experience with OPA/Gatekeeper or Kyverno.
• Knowledge of SBOM generation, artifact signing (cosign), and provenance concepts.
• Familiarity with NIST SP 800-171 or CMMC expectations.
• Strong analytical skills to diagnose complex security issues spanning multiple technologies.