Top DevSecOps Engineer Jobs

Designs and automates security controls across AWS infrastructure, containers, CI/CD systems, and platform services. Builds hardened container images, integrates vulnerability and configuration scanning, manages secrets and identity controls, automates compliance checks, and supports audit evidence. Diagnoses security weaknesses and drives remediation with engineering teams. At the Staff level, establishes reusable security patterns and promotes adoption across multiple teams while balancing security, reliability, and developer productivity.

Designs and automates security controls across AWS infrastructure, containers, CI/CD systems, and platform services. Builds hardened images, integrates security and compliance scanning, implements secrets and access controls, automates audit evidence and configuration validation, and drives remediation of infrastructure and delivery-system weaknesses. Partners with cybersecurity, infrastructure, build engineering, and product teams to create reusable security patterns and promote secure engineering practices across multiple teams.

Manage private cloud infrastructure using OpenShift and Kubernetes; develop Infrastructure as Code and automated DevSecOps pipelines; monitor and resolve issues across operating systems and applications; support ATO compliance through patching, tuning, and documentation; and collaborate with distributed SAFe Agile teams supporting intelligence and national security users.

Designs, deploys, and maintains AWS cloud infrastructure, Infrastructure-as-Code, Applications-as-Code, CI/CD pipelines, containerized environments, and Linux/Windows systems. Develops integration interfaces, testing plans, security configurations, documentation, and technical presentations while troubleshooting complex infrastructure. Works within Agile teams and supports identity resources, cloud architecture, configuration management, system validation, API gateways, and government customer requirements.

Lead design, deployment, and maintenance of secure software development environments across multiple networks. Manage CI/CD, IaC, cloud and on-prem infrastructure, tool administration, compliance, and mentor teams to implement DevSecOps best practices.

Engineer automated application and cloud security solutions, support SAST, DAST, SCA, CSPM, and vulnerability-scanning tools across the software development lifecycle. Advise engineering teams on secure architecture, monitor emerging threats, remediate assessment findings, improve security processes, and mentor staff. The role requires collaboration across cross-functional teams and expertise in DevSecOps, cloud technologies, CI/CD pipelines, security testing, and vulnerability management.

Develops and maintains AWS cloud infrastructure, Infrastructure-as-Code, CI/CD pipelines, containerized solutions, automated testing, and secure Linux and Windows environments. Builds integrations with Python, PowerShell, and Groovy; configures identity and access resources; troubleshoots complex systems; and documents architectures and procedures. The role supports an MBSE cloud platform within an Agile Scrum team and requires collaboration across infrastructure, applications, cloud services, and security domains.

Designs, deploys, and maintains cloud-based (primarily AWS) infrastructure and DevSecOps pipelines using IaC and AaC. Builds CI/CD automation, configures identity services, authors test plans and documentation, troubleshoots Linux/Windows environments, and works on an Agile team delivering MBSE-supporting cloud architectures.

Designs and engineers DevSecOps platforms supporting software development, integration, testing, and infrastructure for the U.S. Navy. Develops CI/CD pipelines, automates Kubernetes and cloud infrastructure, hardens images, validates information assurance controls, assesses risks, troubleshoots systems, and documents engineering processes. The role requires infrastructure-as-code, container orchestration, cloud administration, continuous security, and compliance with DoD and NIST standards. Candidates must hold an active Interim Secret clearance and relevant DoD 8570 certification.

Supports CI/CD and DevSecOps implementation for a Navy IT modernization program. Builds and maintains automated pipelines, Kubernetes environments, configuration management, version control, release processes, and security architecture. Integrates development and security tools, monitors compliance with Navy policies, improves automated code analysis, documents technical architecture and roadmaps, and coordinates solutions across development, operations, integration, and cybersecurity teams.

Designs and operates secure AWS cloud environments, DevSecOps pipelines, infrastructure-as-code, automated security controls, and incident response workflows. Responsibilities include integrating security testing into CI/CD, managing AWS firewalls and virtualized NGFWs, securing containers and Kubernetes workloads, enforcing IAM and compliance controls, monitoring threats, troubleshooting incidents, and automating remediation. The role supports NIWC Atlantic and requires an active Secret clearance, an ABET-accredited engineering degree, and substantial IT, AWS security, DevOps, and network-security experience.

Designs, secures, and maintains DevSecOps infrastructure, CI/CD pipelines, container platforms, and cloud or on-premises Kubernetes environments. Responsibilities include integrating automated security testing, remediating STIG findings, developing Infrastructure as Code, hardening container images, supporting SRE practices, and maintaining application environments. The role also contributes to software development, testing, monitoring, compliance, reliability, and Agile Scrum delivery across secure federal environments.

Designs, builds, and maintains DevSecOps platforms, CI/CD pipelines, cloud infrastructure, Kubernetes environments, infrastructure-as-code, and automated security validation. Supports AWS networking, image hardening, risk assessments, DoD and NIST compliance, system testing, troubleshooting, documentation, and Agile delivery for United States Navy systems. Requires collaboration across engineering teams, technical writers, and project work teams, along with periodic travel and active Secret clearance.

Designs, builds, and maintains DevSecOps platforms, CI/CD pipelines, infrastructure-as-code, Kubernetes environments, cloud networking, hardened images, and infrastructure automation. Performs security control validation, risk assessments, troubleshooting, testing, documentation, and compliance activities aligned with DoD and NIST guidance. Supports Agile planning, technical assessments, system integration, and cloud application development for United States Navy systems. Requires an active Top Secret clearance, Security+ certification, U.S. citizenship, and periodic travel.

The DevSecOps Engineer embeds security into software development, cloud infrastructure, CI/CD pipelines, and deployment processes. Responsibilities include implementing automated security controls, managing application and cloud vulnerability scanning, conducting threat modeling and design reviews, securing containers and Infrastructure as Code, developing security automation and reporting, tracking remediation, and supporting audits and compliance activities. The role partners extensively with development, infrastructure, cloud, architecture, cybersecurity, and data teams in a regulated healthcare environment.

Builds, secures, and operates AI development infrastructure and production systems using DevSecOps practices. Responsibilities include creating CI/CD pipelines, Infrastructure as Code, deployment automation, and reusable infrastructure modules; managing Kubernetes and Docker workloads across cloud, on-premises, and classified environments; implementing security, identity, vulnerability, supply-chain, and observability controls; and supporting AI integration across mission environments.

Architect and scale the IDDE DevSecOps environment using Terraform, Kubernetes, and hybrid AWS/Azure infrastructure. Build CI/CD pipelines, administer Windows Active Directory and user accounts, manage containerized applications, and support deployment orchestration. Collaborate with cyber engineers on STIG compliance and integrate automated security and code scanning into delivery pipelines. Produce infrastructure documentation and support software release objectives.

Own and implement application security across the software development lifecycle for multiple product lines. Define security controls, validation gates, standards, and guardrails; conduct architecture reviews; enhance CI/CD security; triage SAST, SCA, and penetration-testing findings; support incident response; maintain FedRAMP and CJIS compliance; and represent security practices in audits and customer engagements.

Designs and maintains secure CI/CD pipelines, integrating automated vulnerability, code, dependency, and secrets scanning. Automates compliance controls, policy enforcement, RMF/ATO evidence collection, and continuous monitoring. Secures containers, Kubernetes, cloud and on-premise infrastructure, and infrastructure-as-code. Partners with engineering, operations, and security teams on vulnerability remediation, threat modeling, secure coding, and security training. Supports classified and CUI environments, CMMC and DFARS compliance, and travels up to 15% for customer and program-site engagements.

Designs, deploys, operates, maintains, and scales secure cloud infrastructure and development platforms. Builds automated CI/CD pipelines, integrates testing and source control tools, manages releases across environments, and supports cloud operations, security automation, governance, and change management. Collaborates with developers, production support, and information security teams while applying Agile and DevSecOps practices to improve delivery efficiency and operational reliability for national security missions.

Designs and deploys secure AWS and multi-cloud environments for DoD mission systems. Builds infrastructure as code, Kubernetes platforms, CI/CD pipelines, and GitOps workflows while integrating vulnerability scanning, compliance enforcement, observability, and automated remediation. The role manages cloud performance and costs, applies RMF and STIG requirements, collaborates with government and mission partners, and produces technical architecture and pipeline documentation.

Designs, deploys, secures, and maintains cloud platforms supporting Department of the Air Force missions. Develops CI/CD pipelines, infrastructure automation, security tooling, containerized environments, and cross-domain solutions using AWS, Kubernetes, Docker, GitLab, and Bitbucket. Collaborates with developers, cybersecurity teams, and production support through Agile and DevOps practices while modernizing legacy systems and ensuring secure, reliable environments throughout the software development lifecycle.

Designs, implements, and operates secure CI/CD pipelines, cloud infrastructure, infrastructure-as-code, automated security testing, and security controls. Integrates vulnerability management, policy-as-code, threat modeling, compliance, and incident remediation into software delivery. Partners with developers, architects, platform teams, cybersecurity professionals, and compliance stakeholders to improve secure coding, automation, documentation, and security architecture. Requires two onsite days weekly in Rosslyn, Virginia, U.S. citizenship, and an active Secret clearance.

Designs, deploys, operates, and secures cloud environments supporting development, testing, staging, and production. Maintains cybersecurity tools, CI/CD integrations, source control, release management, automation, governance, and security policies. Collaborates with developers, production support, and information security teams to automate infrastructure, testing, and continuous cyber posture improvements. The role requires extensive DevSecOps experience, U.S. citizenship, and Top Secret clearance with the ability to obtain SCI.

Develops and operates secure virtualized and containerized systems across AWS and on-premises environments. Automates infrastructure deployment, configuration, cybersecurity controls, application installation, and CI/CD pipelines using Terraform, Ansible, PowerShell, Python, and Bash. Configures Windows, Linux, and Kubernetes systems; supports vulnerability monitoring and remediation; troubleshoots cloud resources and automation pipelines; maintains documentation; and collaborates with technical teams and auditors. The role is fully onsite in Hampton, Virginia and requires an active Secret clearance.