DevSecOps Engineer, Washington, D.C.

Location

Washington, D.C.

Job Description

We are seeking a skilled DevSecOps Engineer to support our team by integrating security into the development and operational pipeline. In this role, you will design and automate CI/CD pipelines, manage cloud infrastructure through Infrastructure as Code (IaC), and implement security controls to protect critical systems. You will work closely with development teams to enhance automation and ensure compliance with security policies. The ideal candidate will have experience in Linux system management, API security, and cloud security practices, along with the ability to collaborate in Agile environments and respond to security incidents proactively.

Responsibilities

• Implement Infrastructure as Code to manage cloud resources efficiently, ensuring scalability and flexibility for all workloads.
• Integrate security controls into the development lifecycle (DevSecOps principles) to ensure systems are secure from the outset.
• Implement containerization (e.g., Docker, Kubernetes) for deployment, ensuring security practices are embedded into container lifecycle management.
• Implement DevSecOps practices in alignment with Scaled Agile Framework (SAFe).
• Integrate security measures throughout the software development pipeline.
• Collaborate with Agile teams and participate in SAFe ceremonies.
• Develop and maintain security automation tools and processes.
• Conduct threat modeling and implement secure coding practices.
• Actively participate in incident response and compliance activities.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Expertise in containerization technologies such as Docker and Kubernetes.
• Solid understanding of cloud platforms like AWS, Azure, or Google Cloud.
• Experience with source control tools like Git and GitLab.
• Strong proficiency in programming languages like Python, Java, or Bash scripting.
• Experience in integrating security into CI/CD pipelines and automating security testing.
• Knowledge of vulnerability management, static code analysis, and security testing tools.
• Strong collaboration and communication skills, with the ability to work in Agile environments.