Top DevSecOps Engineer Jobs

Build and maintain CI/CD pipelines, automate infrastructure, and support secure containerized platforms for U.S. Navy mission software. The role partners with software and cybersecurity engineers to resolve delivery issues, adapt technical stacks, and enable rapid microservice deployment to orchestration platforms. Responsibilities include infrastructure automation, container platform support, and pipeline engineering in regulated environments.

Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).

Design, deploy, and secure scalable AWS and Azure cloud environments using IaC. Build secure CI/CD pipelines, enforce software supply-chain protections, harden AKS/EKS, manage key rotation and data protection, and centralize telemetry into Microsoft Defender for Cloud. Support secure AI/LLM platforms and operationalize cloud security posture and runtime protections.

Leads the design, operation, security, and automation of AWS cloud infrastructure. Manages Kubernetes, Helm, Terraform, GitLab CI/CD, ArgoCD, and Python tooling while embedding security through IAM, secrets management, vulnerability scanning, policy-as-code, and compliance controls. Serves as the senior technical escalation point, mentors engineers, and advises on integrating AI and LLM tooling into engineering workflows.

Build, maintain, and improve complex government software environments. Design and optimize CI/CD pipelines, deploy and troubleshoot AWS environments, operate Kubernetes clusters, and use infrastructure-as-code, containerization, and automated deployment practices. Collaborate within Agile Scrum teams, independently complete technical tasks, recommend process improvements, and support operational software deployments. The role requires an active TS/SCI clearance with polygraph, US citizenship, and onsite work in Michigan or Virginia.

Leads secure CI/CD, containerized deployments, and infrastructure automation for DoD case management systems in AWS GovCloud. Builds pipelines using Docker, Kubernetes, and Terraform or CloudFormation; integrates security scanning, monitoring, vulnerability management, and compliance checks aligned with RMF and DISA STIGs. Supports Zero Trust architecture, incident response, scalability, ATO documentation, and secure repository management while collaborating with engineering, development, cybersecurity, and systems administration teams.

Maintain secure CI/CD pipelines, security scanning, Git workflows, cloud and CMS environments, infrastructure-as-code, and automated deployments across development through production. Troubleshoot build and deployment issues, optimize pipeline reliability, document standards, and collaborate with developers, cybersecurity teams, and system administrators in an Agile federal and DoD-aligned environment.

Designs, builds, maintains, and improves secure infrastructure and DevSecOps processes across production, QA, and development environments. Responsibilities include automating deployments, backups, monitoring, security controls, and infrastructure capabilities; supporting CI/CD, cloud, configuration management, and classified environments; troubleshooting systems; and ensuring end-to-end quality and compliance with security standards. The role requires extensive DevSecOps experience, IAT Level 2 certification, AWS and Linux expertise, programming or scripting skills, and an active TS/SCI with polygraph clearance.

Leads DevSecOps strategy, architecture, automation, security controls, infrastructure management, testing, monitoring, and platform improvements for an AI digital engineering laboratory. Provides expert training and mentorship to interns and staff, develops curriculum, maintains cloud, virtualized, and containerized environments, documents processes, tracks performance metrics, and supports enterprise configuration management. The role requires collaboration with developers, testers, academic partners, and government stakeholders, plus occasional travel.

Designs, deploys, manages, and optimizes containerized applications and infrastructure on OpenShift. Ensures stability, security, and performance across environments while supporting CI/CD, monitoring, scripting, Ansible automation, Linux security hardening, SELinux policies, repository management, backup and recovery, and RHEL installation automation. Requires Red Hat certifications or equivalent credentials, container platform experience, U.S. citizenship, and eligibility for a Secret-level government clearance.

Leads the architecture, maintenance, and scaling of enterprise CI/CD platforms and pipelines. Integrates automated security controls, vulnerability scanning, compliance enforcement, testing frameworks, infrastructure-as-code, observability, secrets management, Kubernetes security, and multi-environment deployment strategies. Partners with engineering and security teams to remediate risks and ensure software assurance across complex defense and intelligence systems. The role requires advanced DevSecOps expertise, active TS/SCI clearance with Full-Scope Polygraph, and substantial technical leadership experience.

Designs and maintains enterprise CI/CD pipelines, infrastructure-as-code automation, container platforms, and secure application deployment processes. Integrates security testing and controls across the SDLC, manages vulnerability remediation using Fortify and Tenable, supports Kubernetes and Rancher environments, and ensures compliance with FISMA, NIST, NIH, and HHS requirements. Develops automation using Terraform, Ansible, and scripting languages while supporting Windows and Linux enterprise platforms.

Design, automate, and secure CI/CD pipelines and infrastructure using RHEL, Ansible, Bash, and Python. Integrate automated security testing (SAST/DAST/container scanning), manage Red Hat systems, and support secure deployments in a regulated environment with an active DoD Secret clearance.

Lead the design, implementation, scaling, and automation of secure AWS and Azure cloud platforms for U.S. Air Force intelligence workloads. Build landing zones and shared services using Infrastructure as Code and DevSecOps practices, implement access controls, logging, auditing, and backups, and ensure compliance with DoD STIG and RMF requirements. Collaborate with cybersecurity, networking, and application teams while mentoring engineers and advancing cloud automation practices.

Designs, deploys, and sustains AWS GovCloud infrastructure supporting enterprise data science platforms. Responsibilities include cloud migration, high availability, version and patch management, backup and disaster recovery, incident response, security accreditation support, CI/CD, Kubernetes or PCF platforms, and infrastructure as code. The role also supports Posit data science tools, data applications, Agile development, customer coordination, and modernization initiatives.

Owns secure CI/CD engineering and integrates SIEM, scanners, ticketing, and other cybersecurity tools into automated workflows. Builds SOAR libraries, runbooks, playbooks, telemetry and data-normalization standards; manages hardened enterprise configurations through infrastructure-as-code and configuration management. Produces integration documentation, optimization reports, audit-remediation artifacts, and traceability documentation. Supports security validation, vulnerability management, and incident response across cloud-native and hybrid environments.

Design, administer, secure, scale, and troubleshoot GitLab CI/CD pipelines and GitLab Runners across Linux and containerized environments. Configure DevSecOps tools to meet cybersecurity technical controls and authorization requirements, support Kubernetes-based applications, and resolve pipeline issues for software product teams. Preferred experience includes DoD cloud infrastructure, classified networks, the NAVSEA ASAP process, and administration of SonarQube, Anchore, and Artifactory.

Develops, tests, secures, deploys, sustains, and modernizes Agile/DevSecOps software applications across unclassified and classified environments. Responsibilities include eliciting user stories, maintaining backlogs and release plans, applying secure coding and vulnerability analysis, supporting CI/CD pipelines, and deploying solutions in government data centers and AWS or Azure commercial cloud environments.

Develops, tests, secures, deploys, sustains, and modernizes Agile and DevSecOps applications across unclassified and classified environments. Responsibilities include user-story development, backlog and release-plan maintenance, secure coding, vulnerability remediation, CI/CD pipeline support, source-code management, and cloud or government data-center deployments using approved programming languages and platforms.

Designs, automates, and maintains cloud infrastructure, infrastructure-as-code, CI/CD pipelines, containerized applications, automated testing, and deployment processes. Supports operational missions using AWS or other major cloud platforms, scripting, automation, observability, and serverless technologies. Collaborates effectively with distributed Agile teams and requires an active TS/SCI clearance with polygraph. This is an onsite role in Aurora, Colorado; Ypsilanti, Michigan; or King of Prussia, Pennsylvania, with up to 10% travel.

Leads secure DevSecOps automation, systems integration, infrastructure engineering, and full-stack application development. Designs CI/CD pipelines with security controls, implements infrastructure as code, hardens systems, supports RMF/ATO activities, and develops secure applications, APIs, dashboards, and automation tools. Performs requirements analysis, integration, verification, validation, monitoring, and root-cause analysis. Leads technical projects, mentors engineers, and collaborates across development, operations, and security teams.

Build and maintain AWS-based DevOps infrastructure, CI/CD pipelines, containerized microservices, and Infrastructure as Code. Improve observability, resilience, security, compliance, and scalability through monitoring, vulnerability management, system hardening, and performance testing. Collaborate with development teams to resolve outages, contribute to architecture and software development, review code, document systems, mentor engineers, and participate in Agile ceremonies and on-call support.

Develops and sustains secure Kubernetes and DevSecOps deployment packages for ICAM environments. Automates build, testing, scanning, signing, packaging, and release workflows; integrates distributed policy and identity services; troubleshoots customer deployments; and creates technical documentation. The role supports resilient operations across enterprise, multi-site, tactical, and disconnected environments while contributing to software supply chain security, customer assessments, technical reviews, mentoring, and Agile delivery.

Designs and maintains secure CI/CD pipelines for microservices and containerized deployments. Manages Docker, Kubernetes, OpenShift, AWS ECS, cloud infrastructure, and infrastructure-as-code using Terraform, CloudFormation, and AWS CDK. Integrates security scanning and shift-left practices, hardens environments, troubleshoots deployments, conducts vulnerability assessments, and supports RMF and STIG compliance across classified and unclassified systems. Collaborates with software engineering, security, and systems administration teams to deliver secure, scalable mission systems.

Secure internal systems and software development processes through least-privilege access, employee onboarding and offboarding, MDM oversight, technology reviews, vulnerability remediation, security automation, infrastructure as code, incident response, documentation, and security training. The role also participates in on-call support and helps develop scalable security controls across Linux-based infrastructure, AWS, and code.