Senior DevSecOps Engineer: Secure CI/CD & Cloud

Staffing Spot, Inc.; York (York County); On-site; USD 140,000 - 190,000; Full time

Job summary

Staffing Spot, Inc. is seeking a DevSecOps Engineer in the United States with 7+ years of hands-on DevSecOps experience in AI/ML or data-intensive systems.

You will secure CI/CD pipelines, container environments, and cloud deployments across AWS/Azure/GCP, while integrating security tools and automating tests. You will drive Zero Trust implementations, manage ATO processes, and ensure compliance with NIST 800-53, RMF, FedRAMP, ISO 27001, SOC 2, and PCI DSS.

Qualifications

• Bachelor's in CS or related field or equivalent experience.
• 7+ years in DevSecOps for AI/ML or data-intensive systems.
• Familiar with OpenShift or Kubernetes security hardening.
• Knowledge of Zero Trust Architecture concepts.
• Experience managing ATO processes.
• Expertise with DevSecOps tools, practices, and frameworks.
• Strong security standard knowledge (NIST 800-53, RMF, FedRAMP).
• Cloud experience (AWS/Azure/GCP) and containerization (Docker/ Kubernetes).
• Scripting skills (Python, Bash or similar).
• Active security clearance or eligibility.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines.
• Integrate security tools into DevOps workflows and automate security testing.
• Perform vulnerability scanning, SAST, DAST, SCA, and container image scanning.
• Implement IaC security using Terraform, Checkov, or similar tools.
• Hands-on CI/CD pipeline development and automation.
• Secure container environments with Docker, Podman, or CRI-O.
• Enforce IAM, RBAC, least-privilege access and policy-as-code.
• Monitor security events and coordinate remediation with teams.
• Collaborate with development, operations, and security for compliance.
• Support standards like ISO 27001, SOC 2, and PCI DSS.

Skills

Leadership

Communication

Scripting

Cloud security

Education

Bachelor's in CS or related field

Tools

OpenShift

Kubernetes

Terraform

Checkov

Docker

Podman

CI/CD tools

SAST/DAST tools

IAM/Policy-as-code

Job description

Staffing Spot, Inc. is seeking a DevSecOps Engineer in the United States with 7+ years of hands-on DevSecOps experience in AI/ML or data-intensive systems.

You will secure CI/CD pipelines, container environments, and cloud deployments across AWS/Azure/GCP, while integrating security tools and automating tests. You will drive Zero Trust implementations, manage ATO processes, and ensure compliance with NIST 800-53, RMF, FedRAMP, ISO 27001, SOC 2, and PCI DSS.