The Role
Mid-level DevSecOps Engineer to extend and maintain a federal customer's secure infrastructure automation and CI/CD pipelines. Responsibilities include IaC with Terraform/OpenTofu, Ansible automation, GitHub Actions pipelines with embedded security gates, container hardening and scanning, Kubernetes/Helm support, and alignment with CIS and NIST security controls.
Summary Generated by Built In
DevSecOps Engineer – Mid-Level
Clearance Required: Public Trust Tier 2
Company: Nationwide IT Services
Location: Remote / Customer Site as Required
Nationwide IT Services is seeking a Mid-Level DevSecOps Engineer to support secure infrastructure automation and software delivery for a federal customer. The engineer will extend the customer’s existing DevSecOps environment using approved tools and established standards, with a focus on infrastructure as code, configuration automation, CI/CD security, container delivery, and security control alignment.
This role requires hands-on experience with Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, and DevSecOps security tooling. The selected candidate will inherit existing customer standards and will not introduce new tools without approval.Responsibilities
Preferred Qualifications
Key Technical SkillsTerraform, OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, Semgrep, Checkov, tfsec, Gitleaks, OPA/Rego, Trivy, Grype, CIS Benchmarks, NIST SP 800-53, NIST SP 800-171, NIST SP 800-207.Company OverviewWorking at Nationwide IT Services means being part of a company grounded in purpose, resilience, and a genuine commitment to people. Since its founding in 2006, NIS has focused on delivering exceptional services to government customers while supporting the nation, taxpayers, and citizens. NIS continues to evolve by embracing remote work, enhancing wellness initiatives, and investing in modern technology while staying true to its mission.
Salary range $110,000 to $175,000 annually
The salary range is a general guideline. We consider several factors when determining base salary offers, including the position's scope and responsibilities, the candidate's experience, education, and skills, and current market conditions.
Clearance Required: Public Trust Tier 2
Company: Nationwide IT Services
Location: Remote / Customer Site as Required
Nationwide IT Services is seeking a Mid-Level DevSecOps Engineer to support secure infrastructure automation and software delivery for a federal customer. The engineer will extend the customer’s existing DevSecOps environment using approved tools and established standards, with a focus on infrastructure as code, configuration automation, CI/CD security, container delivery, and security control alignment.
This role requires hands-on experience with Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, and DevSecOps security tooling. The selected candidate will inherit existing customer standards and will not introduce new tools without approval.Responsibilities
- Develop and maintain infrastructure as code using Terraform and OpenTofu.
- Support modular IaC configurations, remote state management, and change-controlled deployments.
- Build and maintain Ansible playbooks and roles, including secure secrets handling with Ansible Vault.
- Implement and support GitHub Actions CI/CD pipelines with embedded security gates.
- Integrate SAST, IaC scanning, secrets scanning, and policy-as-code checks into delivery pipelines.
- Harden Docker images and support Kubernetes manifests and Helm charts.
- Perform container image scanning and remediation using tools such as Trivy or Grype.
- Align security implementation with CIS benchmarks and NIST SP 800-53, 800-171, and 800-207 control families.
- Support secure automation practices across infrastructure, application delivery, and container environments.
- Work within existing customer-approved standards, processes, and tools.
- Mid-level hands-on experience with Terraform and/or OpenTofu.
- Experience building and maintaining Ansible playbooks and roles.
- Experience with GitHub Actions CI/CD pipelines.
- Familiarity with embedded security gates, including:
- SAST tools such as Semgrep
- IaC scanning tools such as Checkov or tfsec
- Secrets scanning tools such as Gitleaks
- Policy-as-code using OPA/Rego
- Experience with Docker image hardening.
- Experience with Kubernetes manifests and Helm.
- Experience with container image scanning tools such as Trivy or Grype.
- Knowledge of CIS benchmarks and NIST security controls.
- Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.
Preferred Qualifications
- Federal government or FedRAMP experience.
- AWS experience.
- HashiCorp Vault experience.
- Python and/or Bash scripting experience.
- HashiCorp Terraform Associate
- CKA or CKAD
- AWS certification
- CompTIA Security+
Key Technical Skills
Salary range $110,000 to $175,000 annually
The salary range is a general guideline. We consider several factors when determining base salary offers, including the position's scope and responsibilities, the candidate's experience, education, and skills, and current market conditions.
Skills Required
- Public Trust Tier 2 clearance
- Hands-on experience with Terraform and/or OpenTofu
- Build and maintain Ansible playbooks and roles
- Experience with GitHub Actions CI/CD pipelines
- Familiarity with SAST (Semgrep), IaC scanning (Checkov or tfsec), secrets scanning (Gitleaks), and policy-as-code (OPA/Rego)
- Docker image hardening experience
- Experience with Kubernetes manifests and Helm
- Experience with container image scanning tools such as Trivy or Grype
- Knowledge of CIS benchmarks and NIST SP 800-53, 800-171, 800-207 controls
- Bachelor's degree in Information Technology, Computer Science, or equivalent experience
- Federal government or FedRAMP experience
- AWS experience
- HashiCorp Vault experience
- Python and/or Bash scripting experience
- Preferred certifications (Terraform Associate, CKA or CKAD, AWS cert, CompTIA Security+)
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Nationwide IT Services, Inc. (NIS) is designated 8(a) by the SBA, and a CVE verified Service Disabled Veteran Owned Small Business (SDVOSB) Information Technology (IT) and Management consulting company. NIS has been providing Information Technology Solutions, program management support services and subject matter expertise within the federal government since 2006. NIS works with each client to deploy a mission-specific solution that: Complies with the Regulatory Environment Captures the Client’s Mission, Vision & Values Aligns Objectives with Deliverables Applies Industry Best Practices Creates Measurable, Sustainable Change.
