Senior DevSecOps Lead: GovCloud CI/CD, Hybrid

Momentum Engineering; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Group medical plan

Dental

Vision

Life insurance

STD/LTD plans

Job summary

Momentum Engineering is seeking a Senior DevSecOps Engineer Lead to support federal programs hosted on AWS GovCloud. This hybrid role requires expertise in DevSecOps best practices, cloud automation, security compliance, and CI/CD to enhance security and efficiency of critical applications.

You will design secure GovCloud environments, build pipelines with GitLab/Jenkins, and implement automated security testing within the SDLC, collaborating with cross-functional teams.

Qualifications

• US citizenship with the ability to obtain a DoD Secret clearance.
• Security+ Certification.
• 7+ years of hands-on DevSecOps, Cloud Engineering, or Infra Automation.
• Strong expertise in AWS GovCloud services, security configurations, and compliance.
• Experience with CI/CD tools: GitLab CI/CD, Jenkins, AWS Code Pipeline.
• IaC experience with Terraform, CloudFormation, and Ansible.
• Proficiency in Docker, Kubernetes, EKS, ECS, Fargate.
• Knowledge of AWS security services (IAM, GuardDuty, Security Hub, KMS, WAF, Config, Secrets Manager).
• Familiar with RMF, NIST 800-171/53, STIGs, Zero Trust.
• Experience automating security testing (SAST/DAST) and SBOM management.
• Scripting in Python, Bash, or PowerShell for automation.

Responsibilities

• AWS GovCloud Architecture & Management: design, implement, and maintain secure, compliant GovCloud environments for DoD/Civilian apps.
• DevSecOps Pipeline Development: build and optimize CI/CD pipelines to automate deployments and security.
• Security & Compliance: adhere to federal cyber frameworks; implement STIGs and automated scanning.
• Infrastructure as Code (IaC): automate provisioning with Terraform, CloudFormation, and Ansible.
• Containerization & Orchestration: deploy Docker/Kubernetes in GovCloud using EKS/ECS/Fargate.
• Monitoring & Incident Response: implement CloudWatch, Security Hub, GuardDuty, Splunk/ELK for monitoring and reporting.
• Automation & Scripting: develop automation scripts to improve deployment efficiency and security enforcement.
• Collaboration & Knowledge Sharing: work with software developers, cybersecurity teams, and cloud engineers to integrate security into SDLC.

Skills

DevSecOps

Cloud Engineering

CI/CD

Automation

Security compliance

Scripting

AWS GovCloud

Containerization

Security testing

Tools

Terraform

CloudFormation

Ansible

GitLab CI/CD

Jenkins

AWS Code Pipeline

Docker

Kubernetes

EKS

ECS

Fargate

Job description

Momentum Engineering is seeking a Senior DevSecOps Engineer Lead to support federal programs hosted on AWS GovCloud. This hybrid role requires expertise in DevSecOps best practices, cloud automation, security compliance, and CI/CD to enhance security and efficiency of critical applications.

You will design secure GovCloud environments, build pipelines with GitLab/Jenkins, and implement automated security testing within the SDLC, collaborating with cross-functional teams.