Senior DevSecOps Lead - AWS GovCloud CI/CD & Security

Momentum Engineering, Inc.; Washington; Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Group medical plan

Dental, vision, life insurance

STD/LTD plans

Job summary

Momentum Engineering, Inc. seeks a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud.

Hybrid role requiring expertise in DevSecOps practices, cloud automation, security compliance, and CI/CD to enhance security, scalability, and efficiency of mission-critical applications. Responsibilities include designing GovCloud environments, building CI/CD pipelines, implementing RMF/NIST controls, and automating infrastructure with Terraform, CloudFormation, and Ansible.

Qualifications

• US citizenship with the ability to obtain a successful DoD Secret security clearance required.
• Security+ Certification is required.
• 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles.
• Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
• Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar).
• Hands-on experience with IaC using Terraform, CloudFormation, and Ansible.
• Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate).
• Strong understanding of AWS security services (IAM, GuardDuty, Security Hub, KMS, WAF, Config, Secrets Manager).
• Knowledge of RMF, NIST 800-171/53, STIGs, Zero Trust.
• Experience implementing automated security testing (SAST, DAST, vulnerability scanning).
• Proficiency in scripting (Python, Bash, PowerShell) for automation and security enforcement.

Responsibilities

• AWS GovCloud Architecture & Management: secure, scalable, compliant GovCloud environments for DoD and Civilian apps.
• DevSecOps Pipeline Development: build CI/CD pipelines to automate deployments and security compliance.
• Security & Compliance: implement frameworks and automated security scanning.
• IaC: automate provisioning with Terraform, CloudFormation, Ansible.
• Containerization & Orchestration: manage Docker, Kubernetes in GovCloud (EKS, ECS, Fargate).
• Monitoring & Incident Response: implement CloudWatch, Security Hub, GuardDuty and logging systems.
• Automation & Scripting: create scripts to improve deployment efficiency and security enforcement.
• Collaboration: work with developers, cybersecurity, and cloud engineers in SDLC.

Skills

DevSecOps

Cloud engineering

CI/CD

Python

Bash/PowerShell

Security automation

Terraform

CloudFormation

Ansible

Docker

Kubernetes

EKS/ECS/Fargate

IAM/GuardDuty/Security Hub

Education

Security+ Certification

Tools

GitLab CI/CD

Jenkins

AWS Code Pipeline

Terraform

CloudFormation

Ansible

Docker

Kubernetes

Job description

Momentum Engineering, Inc. seeks a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud.

Hybrid role requiring expertise in DevSecOps practices, cloud automation, security compliance, and CI/CD to enhance security, scalability, and efficiency of mission-critical applications. Responsibilities include designing GovCloud environments, building CI/CD pipelines, implementing RMF/NIST controls, and automating infrastructure with Terraform, CloudFormation, and Ansible.