Sr. IT Application Solutions Architect/ Sr DevSecOps Engineer

Govserviceshub; Washington; On-site; USD 140,000 - 180,000; Full time

Job summary

Govserviceshub is seeking a Sr. IT Application Solutions Architect/Sr DevSecOps Engineer to lead secure cloud-native development and operations. The role emphasizes hardening CI/CD, blue/green deployments, and automation across AWS services.

Candidates should be proficient in Python CDK and Terraform, with experience in security tooling and governance. The position is located in Washington, DC, with expectations to support on-site collaboration and important SAFe ceremonies as part of Agile

Qualifications

• We are seeking a DevSecOps Engineer with hands-on AWS cloud experience and security-focused CI/CD expertise.
• Experience integrating SAST/DAST/SCA tools into automated pipelines is required.
• Proficiency with Terraform and AWS CDK for infrastructure automation is essential.

Responsibilities

• Design and implement secure CI/CD pipelines using AWS CodePipeline, CodeBuild, and CodeDeploy.
• Configure and manage blue/green deployments for zero-downtime releases.
• Automate infrastructure provisioning with Terraform and AWS CDK (Python).
• Integrate security scanning tools into build and deployment workflows.
• Collaborate with development and operations teams to enforce secure coding and deployment standards.
• Monitor and respond to vulnerabilities across applications and infrastructure.
• Ensure compliance with security policies and cloud governance frameworks.
• Maintain documentation for security processes, configurations, and deployment strategies.

Skills

AWS

Python

CI/CD

Security tooling

Terraform

AWS CDK

Bitbucket

Docker

Kubernetes

Security frameworks

Tools

AWS CodePipeline

CodeBuild

CodeDeploy

Terraform

Python CDK

Bitbucket

Docker

Kubernetes

Job description

Sr. IT Application Solutions Architect/ Sr DevSecOps Engineer

Washington, United States | Posted on 09/09/2025

Sr. IT ApplicationSolutions Architect/ Sr DevSecOpsEngineer
Location: Washington DC

Important Note

We have shifted to adopting SAFe and
1. Encourage Contractors trained in SAFe
2. Request that contractors have camera available and on majority of the time
3. Set expectations that they are part of Agile team on which we need them toembrace self-management and self-organization in terms of their iterationcommitments, capacity planning, capacity allocation, etc.
As long as they can come DC on need basis and attend the important SAFeceremonies like PI onsite.

Requirements

Job Overview

We are seeking a highly skilled DevSecOps Engineerto lead the integration of security into our cloud-native development and operationsworkflows. This role requires deep expertise in AWS tooling, infrastructureautomation, and secure CI/CD practices. The ideal candidate will have hands-onexperience with AWS Code Pipeline, Code Build, Code Deploy (includingblue/green deployments), Bitbucket, Python CDK, and Terraform.

Key Responsibilities

• Designand implement secure CI/CD pipelines usingAWS CodePipeline,Code Build, andCode Deploy.
  
• Configureand manageblue/green deploymentsfor zero-downtime releases.
  
• Automateinfrastructure provisioning usingTerraformandAWS CDK(Python).
  
• Integratesecurity scanning tools (SAST, DAST, SCA) into build and deploymentworkflows.
  
• Collaboratewith development and operations teams to enforce secure coding anddeployment standards.
  
• Monitorand respond to vulnerabilities across applications and infrastructure.
  
• Ensurecompliance with security policies and cloud governance frameworks.
  
• Maintaindocumentation for security processes, configurations, and deploymentstrategies.
  

Required Skills

• Stronghands-on experience withAWS services, including:
  
• oIAM,EC2, Lambda, S3, CloudFormation
  
• ProficiencyinPython, especially for infrastructure automation usingAWSCDK.
  
• ExperiencewithTerraformfor infrastructure-as-code.
  
• FamiliaritywithBitbucketfor source control and pipeline management.
  
• Knowledgeof containerization and orchestration (Docker, Kubernetes).
  
• Experiencewith security tools (e.g. Checkmarx, SonarQube).
  
• Understandingof security frameworks (e.g., OWASP, NIST, CIS).
  

Preferred Certifications

• CertifiedDevSecOps Professional (CDP)
  
• CISSPor equivalent security certification
  

Soft Skills

• Stronganalytical and problem-solving abilities.
  
• Excellentcommunication and collaboration skills.
  
• Abilityto work independently and in cross-functional teams.
  

Passion for automation,security, and continuous improvement