Senior DevSecOps Lead - AWS GovCloud & Federal Compliance

Momentum Engineering, Inc.; Washington (District of Columbia); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Group medical plan

Company paid dental

Vision

Life insurance

STD/LTD plans

Job summary

Momentum Engineering, Inc. seeks a highly skilled Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud in a hybrid role.

You will design secure GovCloud environments, build CI/CD pipelines, enforce security compliance (NIST RMF, FedRAMP), implement IaC with Terraform/CloudFormation, and manage containers with Kubernetes/EKS while monitoring and automating deployments across teams.

Qualifications

• US citizenship with the ability to obtain a DoD Secret clearance is required.
• Security+ Certification is required.
• 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles.
• Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
• Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar).
• Hands-on experience with Infrastructure as Code (IaC) using Terraform, CloudFormation, and Ansible.
• Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate).
• Strong understanding of AWS security services (IAM, GuardDuty, Security Hub, KMS, WAF, Config, Secrets Manager).
• Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs, ZeroTrust).
• Experience implementing automated security testing (SAST, DAST, vulnerability scanning).
• Proficiency in scripting (Python, Bash, PowerShell) for automation and security enforcement.

Responsibilities

• AWS GovCloud Architecture & Management: Design, implement, and maintain secure, scalable GovCloud environments for DoD and Civilian agency applications.
• DevSecOps Pipeline Development: Build and optimize CI/CD pipelines using GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security compliance.
• Security & Compliance: Ensure adherence to Federal cybersecurity frameworks (NIST 800-171, 800-53, RMF, FedRAMP, Zero Trust) and implement automated security scanning.
• Infrastructure as Code (IaC): Automate provisioning and configuration with Terraform, CloudFormation, and Ansible.
• Containerization & Orchestration: Deploy and manage Docker containers and Kubernetes clusters (EKS, ECS, Fargate).
• Monitoring & Incident Response: Implement CloudWatch, GuardDuty, Security Hub, and SIEMs for monitoring and reporting.
• Automation & Scripting: Develop automation scripts (Python, Bash, PowerShell).
• Collaboration & Knowledge Sharing: Work with software developers, cybersecurity teams, and cloud engineers to embed security in SDLC.

Skills

US citizenship

Security clearance readiness

DevSecOps expertise

Cloud engineering

Scripting: Python Bash PowerShell

Tools

GitLab CI/CD

Jenkins

Code Pipeline

Terraform

CloudFormation

Ansible

Docker

Kubernetes

EKS

ECS

Fargate

Job description

Momentum Engineering, Inc. seeks a highly skilled Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud in a hybrid role.

You will design secure GovCloud environments, build CI/CD pipelines, enforce security compliance (NIST RMF, FedRAMP), implement IaC with Terraform/CloudFormation, and manage containers with Kubernetes/EKS while monitoring and automating deployments across teams.