Senior DevSecOps Engineer - Secure CI/CD Architect

EY; McLean (VA); Presencial; USD 105.000 - 192.000; Jornada completa

Descripción de la vacante

EY’s Government and Infrastructure Cybersecurity team in McLean seeks a Senior DevSecOps Engineer to design and operate secure software delivery pipelines for federal, state, and local clients. You will integrate SAST/DAST, IaC scanning, container hardening and governance gates into modern applications while aligning with NIST controls.

Join EY to drive secure modernization, guide the team, and mentor engineers while traveling as needed to client sites in the Washington DC area.

Formación

• Bachelor's degree in computer science, software engineering, information systems, or related field.
• 3–6+ years of experience in DevOps, software engineering, or security engineering.
• Hands-on CI/CD pipeline engineering with Jenkins, GitHub Actions, GitLab CI or Azure DevOps.
• Experience with at least one application security scanning tool (Fortify, Checkmarx, SonarQube, Snyk, Trivy, OWASP ZAP).
• Working knowledge of containers and Infrastructure-as-Code.
• Scripting in Python, PowerShell or Bash.
• Understanding of NIST RMF, NIST SP 800-53 and secure SDLC practices.
• Must obtain/maintain a secret level clearance and be able to work in-person in the DC area.

Responsabilidades

• Assess each application's delivery toolchain and identify gaps in release processes.
• Design, build and maintain secure CI/CD pipelines with SAST/DAST and SCA.
• Implement policy-as-code and automated evidence collection for cATO and controls.
• Harden container images and environments against benchmarks.
• Define DevSecOps patterns and reusable pipeline templates; report security metrics.

Conocimientos

CI/CD design

Security engineering

Executive communication

Educación

Bachelor's degree in CS/Engineering

Herramientas

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

Fortify

Checkmarx

SonarQube

Descripción del empleo

EY’s Government and Infrastructure Cybersecurity team in McLean seeks a Senior DevSecOps Engineer to design and operate secure software delivery pipelines for federal, state, and local clients. You will integrate SAST/DAST, IaC scanning, container hardening and governance gates into modern applications while aligning with NIST controls.

Join EY to drive secure modernization, guide the team, and mentor engineers while traveling as needed to client sites in the Washington DC area.