TS-Cleared DevSecOps Engineer: IaC, CI/CD & Security

E-Logic, Inc.; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

E-Logic, Inc. is seeking a highly skilled DevSecOps Engineer to support the Congressional Budget Office (CBO) under the SENTRY BPA. The role involves IaC, CaC, CI/CD, and container orchestration with a focus on Shift-Left security, NIST SP 800-53, and FISMA compliance.

You will integrate with CBO's engineering teams, extending Terraform/OpenTofu, Ansible, GitHub Actions, Docker, and Kubernetes, while ensuring secure code delivery and secret management using vaults.

Qualifications

• Active Top Secret (TS) security clearance required.
• Hands-on experience with core DevSecOps toolchain.
• Experience with Terraform/OpenTofu and Ansible.
• Experience with GitHub Actions and CI/CD pipelines.
• Experience with Docker and Kubernetes; container security scanning.
• Familiarity with security scanning tools (Trivy, Grype, Checkov, Semgrep, Gitleaks).
• Scripting in Python and Bash; Git workflows.

Responsibilities

• Maintain and improve Terraform and OpenTofu to provision cloud/hybrid infra.
• Develop Ansible playbooks and roles for config automation and deployment.
• Build and refine GitHub Actions workflows for CI/CD and security gates.
• Manage Docker images and Kubernetes manifests and Helm charts.
• Integrate SAST/DAST tools and enforce CIS benchmarks and baselines.
• Use Vault for secrets management within pipelines and infrastructure.

Skills

Scripting (Python & Bash)

Git-based workflows

Security by design

Threat modeling

Tools

Terraform

OpenTofu

Ansible

GitHub Actions

Docker

Kubernetes

Helm

HashiCorp Vault

Trivy

Grype

Checkov

Semgrep

Gitleaks

Job description

E-Logic, Inc. is seeking a highly skilled DevSecOps Engineer to support the Congressional Budget Office (CBO) under the SENTRY BPA. The role involves IaC, CaC, CI/CD, and container orchestration with a focus on Shift-Left security, NIST SP 800-53, and FISMA compliance.

You will integrate with CBO's engineering teams, extending Terraform/OpenTofu, Ansible, GitHub Actions, Docker, and Kubernetes, while ensuring secure code delivery and secret management using vaults.