Nationwide IT Services, Inc.

DevSecOps Engineer – Mid-Level

Posted 4 Days Ago

Hiring Remotely in DC, USA

Remote

Mid level

Information Technology • Consulting • Cybersecurity

The Role

Mid-level DevSecOps Engineer to extend and maintain a federal customer's secure infrastructure automation and CI/CD pipelines. Responsibilities include IaC with Terraform/OpenTofu, Ansible automation, GitHub Actions pipelines with embedded security gates, container hardening and scanning, Kubernetes/Helm support, and alignment with CIS and NIST security controls.

Summary Generated by Built In

DevSecOps Engineer – Mid-Level
Clearance Required: Public Trust Tier 2
Company: Nationwide IT Services
Location: Remote / Customer Site as Required
Nationwide IT Services is seeking a Mid-Level DevSecOps Engineer to support secure infrastructure automation and software delivery for a federal customer. The engineer will extend the customer’s existing DevSecOps environment using approved tools and established standards, with a focus on infrastructure as code, configuration automation, CI/CD security, container delivery, and security control alignment.
This role requires hands-on experience with Terraform/OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, and DevSecOps security tooling. The selected candidate will inherit existing customer standards and will not introduce new tools without approval.Responsibilities

Develop and maintain infrastructure as code using Terraform and OpenTofu.
Support modular IaC configurations, remote state management, and change-controlled deployments.
Build and maintain Ansible playbooks and roles, including secure secrets handling with Ansible Vault.
Implement and support GitHub Actions CI/CD pipelines with embedded security gates.
Integrate SAST, IaC scanning, secrets scanning, and policy-as-code checks into delivery pipelines.
Harden Docker images and support Kubernetes manifests and Helm charts.
Perform container image scanning and remediation using tools such as Trivy or Grype.
Align security implementation with CIS benchmarks and NIST SP 800-53, 800-171, and 800-207 control families.
Support secure automation practices across infrastructure, application delivery, and container environments.
Work within existing customer-approved standards, processes, and tools.

Required Qualifications

Mid-level hands-on experience with Terraform and/or OpenTofu.
Experience building and maintaining Ansible playbooks and roles.
Experience with GitHub Actions CI/CD pipelines.
Familiarity with embedded security gates, including:
- SAST tools such as Semgrep
- IaC scanning tools such as Checkov or tfsec
- Secrets scanning tools such as Gitleaks
- Policy-as-code using OPA/Rego
Experience with Docker image hardening.
Experience with Kubernetes manifests and Helm.
Experience with container image scanning tools such as Trivy or Grype.
Knowledge of CIS benchmarks and NIST security controls.
Bachelor’s degree in Information Technology, Computer Science, or equivalent experience.

Preferred Qualifications

Federal government or FedRAMP experience.
AWS experience.
HashiCorp Vault experience.
Python and/or Bash scripting experience.

Preferred Certifications

HashiCorp Terraform Associate
CKA or CKAD
AWS certification
CompTIA Security+

Key Technical Skills

Terraform, OpenTofu, Ansible, GitHub Actions, Docker, Kubernetes, Helm, Semgrep, Checkov, tfsec, Gitleaks, OPA/Rego, Trivy, Grype, CIS Benchmarks, NIST SP 800-53, NIST SP 800-171, NIST SP 800-207.Company OverviewWorking at Nationwide IT Services means being part of a company grounded in purpose, resilience, and a genuine commitment to people. Since its founding in 2006, NIS has focused on delivering exceptional services to government customers while supporting the nation, taxpayers, and citizens. NIS continues to evolve by embracing remote work, enhancing wellness initiatives, and investing in modern technology while staying true to its mission.

Skills Required

Public Trust Tier 2 clearance
Hands-on experience with Terraform and/or OpenTofu
Build and maintain Ansible playbooks and roles
Experience with GitHub Actions CI/CD pipelines
Familiarity with SAST (Semgrep), IaC scanning (Checkov or tfsec), secrets scanning (Gitleaks), and policy-as-code (OPA/Rego)
Docker image hardening experience
Experience with Kubernetes manifests and Helm
Experience with container image scanning tools such as Trivy or Grype
Knowledge of CIS benchmarks and NIST SP 800-53, 800-171, 800-207 controls
Bachelor's degree in Information Technology, Computer Science, or equivalent experience
Federal government or FedRAMP experience
AWS experience
HashiCorp Vault experience
Python and/or Bash scripting experience
Preferred certifications (Terraform Associate, CKA or CKAD, AWS cert, CompTIA Security+)

View all jobs at Nationwide IT Services, Inc.

View Nationwide IT Services, Inc. Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: Fairfax, VA

211 Employees

Year Founded: 2006

What We Do

Nationwide IT Services, Inc. (NIS) is designated 8(a) by the SBA, and a CVE verified Service Disabled Veteran Owned Small Business (SDVOSB) Information Technology (IT) and Management consulting company. NIS has been providing Information Technology Solutions, program management support services and subject matter expertise within the federal government since 2006. NIS works with each client to deploy a mission-specific solution that: Complies with the Regulatory Environment Captures the Client’s Mission, Vision & Values Aligns Objectives with Deliverables Applies Industry Best Practices Creates Measurable, Sustainable Change.