Senior GovCloud DevSecOps Engineer — CMMC & Compliance

United States Digital Space LLC; United States; Remote; USD 170,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, vision

Generous PTO

Remote work within United States

Job summary

United States Digital Space LLC is seeking a senior DevSecOps Engineer to own secure GovCloud deployment of our platform and drive CMMC Level 2 readiness. You will design, stand up, and harden the isolated enclave handling CUI, and build automation to sustain compliance across the environment.

The role combines hands-on infrastructure work with agentic tooling and secure CI/CD workflows, delivering scalable security posture for a GovCloud‑resident platform while collaborating with an external

Qualifications

• 9+ years of software/infrastructure engineering with lead-level DevSecOps ownership.
• Deep AWS expertise including AWS GovCloud and operation differences from commercial AWS.
• Strong infrastructure-as-code skills (Terraform) and production Kubernetes (EKS) experience.
• Hands-on CI/CD security with SAST/DAST/SCA, container scanning, and artifact signing.
• Working knowledge of NIST SP 800-171 and CMMC 2.0 Level 2 controls.
• Experience authoring or maintaining SSP and POA&M docs in a DoD/defense context preferred.
• Scripting ability (Python or Go) and familiarity with app stack (Python/FastAPI, Node/Express).
• Familiarity with IAM, OIDC/Cognito, MFA, and least-privilege design.
• Fluent use of agentic coding tools as part of workflow.
• Strong written and verbal communication to lead cross-functional efforts.

Responsibilities

• Own design and standup of an AWS GovCloud enclave for CUI protection and compliance.
• Build and maintain infrastructure-as-code for enclave resources using Terraform.
• Harden the EKS/Istio runtime with network policies, mTLS, secrets management, and least-privilege IAM.
• Architect machine-to-machine ingest paths to keep CUI within the boundary.
• Manage encryption and data-at-rest/in-transit controls per FedRAMP/DoD expectations.
• Design and own the secure CI/CD pipeline with security gates and artifact signing.
• Implement supply-chain security, SBOM, provenance, and policy controls.
• Lead CMMC Level 2 / NIST SP 800-171 implementation and liaise with external advisor.
• Support observability, incident response readiness, and cost/reliability optimization.

Skills

AWS GovCloud

Terraform

Kubernetes

Istio

CI/CD security

NIST SP 800-171

Python/Go

IAM

Agentic coding tools

Security posture

Tools

GitHub Actions

GitLab CI

CloudWatch

Trivy

Falco

Job description

United States Digital Space LLC is seeking a senior DevSecOps Engineer to own secure GovCloud deployment of our platform and drive CMMC Level 2 readiness. You will design, stand up, and harden the isolated enclave handling CUI, and build automation to sustain compliance across the environment.

The role combines hands-on infrastructure work with agentic tooling and secure CI/CD workflows, delivering scalable security posture for a GovCloud‑resident platform while collaborating with an external