Senior DevSecOps Engineer - Top SECRET / ONSITE

VISUAL SOFT, INC; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO & Holidays

Health insurance 50% covered for you

401(k) with company match

Profit sharing

Job summary

Visual Soft, Inc. seeks a Senior DevSecOps Engineer to design, automate, and secure enterprise CI/CD workflows and cloud architecture in a fully onsite role in Huntsville, AL.

The candidate will embed DevSecOps into delivery pipelines, lead cloud security posture, and enforce IAM across multi-account AWS environments. The role requires a Bachelor’s degree with 8+ years of experience, US citizenship, and TOP SECRET clearance.

Qualifications

• Bachelor's degree with 8+ years of experience.
• US Citizens with active TOP SECRET clearance required.
• Position is onsite in Huntsville, AL.

Responsibilities

• Own the implementation and operation of software delivery pipelines from build to production release, ensuring secure delivery standards.
• Develop and maintain automated build, test, deployment, and release workflows using GitLab CI/CD, GitLab Runners, AWS CodePipeline, CodeBuild, and related AWS automation.
• Administer GitLab platform infrastructure, enforce RBAC/IAM, and develop reusable CI/CD templates and pipelines across Agile teams.
• Integrate automated security capabilities into pipelines including SAST, DAST, SCA, container image scanning, secrets detection, IaC scanning, and software supply chain security.
• Design and maintain automated deployment strategies for Kubernetes-based applications using Helm, GitOps, and AWS services (Amazon EKS).
• Configure and administer GitLab Container Registry, package repositories, and software dependency management for secure delivery and remediation.
• Collaborate with Cloud Systems Owners to ensure AWS cloud platforms support automated deployment, monitoring, scalability, reliability, and cloud security.
• Architect and enforce IAM policies, least-privilege access, IRSA, and federated authentication across CI/CD pipelines and AWS environments.
• Partner with development teams to improve build reliability, deployment consistency, and productivity through automation and threat mitigation.
• Work with cybersecurity teams to operationalize cloud security benchmarks (CIS, NIST) and ensure continuous compliance.
• Troubleshoot build failures, deployment issues, and pipeline performance; maintain runbooks and DevSecOps standards.

Skills

DevSecOps

AWS

IAM

SAST/DAST

SCA

GitLab CI/CD

Kubernetes

Education

Bachelor's degree

Tools

AWS CodePipeline

AWS CodeBuild

GitLab

GitLab Runners

IAM

EKS

Terraform/IaC

Job description

• Information Technology

Visual Soft, Inc is seeking qualified candidates (US Citizens with active TOP SECRET clearance - a requirement onits Project with a Major Prime) for the following position for a federal agency.

Job Title

Senior DevSecOps Engineer

Location

Huntsville, AL (ONSITE)

Salary

based on experience on other qualifications. OR 1099 is also available only for individuals NOT C2C scenario, check will be issued in legal name

Clearance

TOP SECRET is a must and job is fully ONSITE

Education

Bachelor's degree with 8+ years of experience

Senior DevSecOps Engineer

Role Overview

We are seeking an experienced **Senior DevSecOps Engineer** to design, automate, and secure our enterprise CI/CD workflows and cloud architecture. In this role, you will embed **DevSecOps** practices directly into delivery pipelines, lead our **cloud security** posture across modern application environments, and establish robust **identity and access management** controls across multi-account **AWS** infrastructures.

Primary Responsibilities

• Own the implementation and operation of software delivery pipelines**, from build through production release, ensuring strict adherence to **DevSecOps** and secure delivery standards.
• Develop, administer, and maintain automated build, test, deployment, and release workflows** using GitLab CI/CD, GitLab Runners, **AWS CodePipeline**, **AWS CodeBuild**, and related **AWS** automation technologies.
• Administer GitLab platform infrastructure** (projects, groups, runners, repositories, and permissions), enforce role-based access control and **identity and access management** principles, and develop reusable CI/CD templates and pipeline libraries adopted across Agile teams.
• Integrate automated security capabilities into software delivery pipelines**, including static application security testing (SAST), dynamic testing (DAST), software composition analysis (SCA), container image scanning, secrets detection, Infrastructure-as-Code (IaC) scanning, and software supply chain security.
• Design and maintain automated deployment strategies for Kubernetes-based applications** utilizing Helm, GitOps methodologies, and progressive deployment techniques integrated with **AWS** services (such as Amazon EKS).
• Configure and administer GitLab Container Registry, package repositories, artifact repositories**, and software dependency management solutions supporting secure software delivery and vulnerability remediation.
• Collaborate with Cloud Systems Owners** to ensure **AWS** cloud platforms effectively support automated software deployment, scalability, operational monitoring, application reliability, and end-to-end **cloud security**.
• Architect and enforce identity and access management (IAM)** policies, least-privilege boundaries, IAM Roles for Service Accounts (IRSA), and federated authentication across all CI/CD pipelines and **AWS** cloud environments.
• Partner with software development teams** to improve build reliability, deployment consistency, release quality, and developer productivity through automation, self-service engineering capabilities, and shift-left security practices.
• Work closely with cybersecurity teams** to operationalize **cloud security** benchmarks (CIS, NIST), integrate security gates throughout the SDLC, and ensure continuous compliance with organizational security requirements.
• Troubleshoot build failures, deployment issues, pipeline performance, dependency management, and software delivery problems** across development, integration, and production environments.
• Develop and maintain pipeline documentation, deployment procedures, release management processes**, operational runbooks, and **DevSecOps** engineering standards.
• Participate in Agile ceremonies** while supporting multiple software development teams through automation, continuous integration, continuous delivery, and proactive threat mitigation.

Key Qualifications & Core Competencies

• AWS:** Deep hands-on experience designing and operating secure infrastructure on Amazon Web Services (EKS, IAM, KMS, Security Hub, GuardDuty, CloudTrail, S3, VPC).
• DevSecOps:** Proven track record of integrating automated security tooling (SAST/DAST, SCA, Trivy, Snyk, Semgrep, Checkov/tfsec) into active CI/CD pipelines without slowing developer velocity.
• Cloud Security:** Practical expertise implementing defense-in-depth, container runtime security, network perimeter defense, and cloud compliance auditing.
• Identity and Access Management:** Advanced knowledge of IAM policies, cross-account access, credential brokering, OIDC token federation for CI/CD runners, and zero-trust access controls.

Standard benefits: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all full-time employees are eligible to be part of company's profit sharing, no employee contributions required.