Senior DevSecOps Lead — AWS GovCloud, FedRAMP, CI/CD & IaC

Momentum Engineering, Inc; Washington (District of Columbia); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Medical plan

Dental plan

Vision plan

Life insurance

STD/LTD plans

Job summary

Momentum Engineering, Inc. is seeking a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud. The role emphasizes secure cloud design, automation, and compliance across CI/CD pipelines and IaC, with collaboration across security and development teams.

The position is hybrid, requiring cloud engineering expertise, DoD-style security standards, and hands-on experience with Terraform, CloudFormation, and container orchestration in GovCloud environments.

Qualifications

• US citizenship with ability to obtain DoD Secret clearance.
• Security+ Certification.
• 7+ years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles.
• Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
• Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar).
• Hands-on experience with Infrastructure as Code (IaC) using Terraform, CloudFormation, and Ansible.
• Proficiency in containerization and orchestration (Docker, Kubernetes, EKS, ECS, Fargate).
• Strong understanding of AWS security services (IAM, GuardDuty, Security Hub, KMS, WAF, Config, Secrets Manager).
• Knowledge of federal cybersecurity frameworks (RMF, NIST 800-171/53, STIGs, Zero Trust).
• Experience implementing automated security testing (SAST, DAST, vulnerability scanning).
• Proficiency in scripting (Python, Bash, PowerShell).

Responsibilities

• Design, implement, and maintain secure AWS GovCloud environments for DoD and Civilian applications.
• Build and optimize CI/CD pipelines using GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security.
• Ensure adherence to Federal cybersecurity frameworks and implement STIGs, baselines, and automated security scanning.
• Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible.
• Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud using EKS, ECS, and Fargate.
• Implement monitoring with AWS CloudWatch, GuardDuty, Security Hub, and Splunk/ELK for proactive logging and compliance reporting.
• Develop automation scripts in Python, Bash, or PowerShell to improve deployment efficiency and security enforcement.
• Collaborate with developers, cybersecurity teams, and cloud engineers to integrate security into the SDLC.

Skills

DevSecOps

Cloud engineering

CI/CD

Security compliance

Automation scripting

SDLC collaboration

Tools

Terraform

CloudFormation

Ansible

Docker

Kubernetes

EKS

ECS

Fargate

GitLab CI/CD

Jenkins

Code Pipeline

Python

PowerShell

Bash

Job description

Momentum Engineering, Inc. is seeking a Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud. The role emphasizes secure cloud design, automation, and compliance across CI/CD pipelines and IaC, with collaboration across security and development teams.

The position is hybrid, requiring cloud engineering expertise, DoD-style security standards, and hands-on experience with Terraform, CloudFormation, and container orchestration in GovCloud environments.