Top DevSecOps Engineer Jobs

Architect, operate, and optimize DevSecOps pipelines for multi-domain NIPRNet delivery. Integrate CI/CD and security tooling, author policy-as-code and pipeline standards, triage vulnerabilities, monitor pipeline reliability, and coordinate cross-functional teams to maintain compliance and mission readiness.

Own and improve TinyFish’s vulnerability-management program across AWS infrastructure, applications, containers, CI/CD, and production services. Implement security controls, automate security testing and compliance checks, conduct threat modeling, coordinate penetration tests, and drive findings through verified remediation. Support incident response, security logging, detection engineering, SOC 2 and ISO 27001 initiatives, and security reporting while partnering with engineering and leadership.

Design, implement, and maintain DevSecOps and CI/CD pipelines using open-source tools; automate deployments with IaC; integrate security (static analysis) into pipelines; manage containerized deployments (Docker, Kubernetes, Helm); monitor metrics and troubleshoot infrastructure; support release configuration and collaborate with engineers on testing and documentation.

Designs and maintains secure CI/CD pipelines for microservices and containerized deployments. Manages Docker, Kubernetes, OpenShift, AWS ECS, cloud infrastructure, and infrastructure-as-code using Terraform, CloudFormation, and AWS CDK. Integrates security scanning and shift-left practices, hardens environments, troubleshoots deployments, conducts vulnerability assessments, and supports RMF and STIG compliance across classified and unclassified systems. Collaborates with software engineering, security, and systems administration teams to deliver secure, scalable mission systems.

Secure internal systems and software development processes through least-privilege access, employee onboarding and offboarding, MDM oversight, technology reviews, vulnerability remediation, security automation, infrastructure as code, incident response, documentation, and security training. The role also participates in on-call support and helps develop scalable security controls across Linux-based infrastructure, AWS, and code.

Develop and secure software delivery pipelines for Space Systems Command defensive cyber solutions. Responsibilities include integrating security into CI/CD workflows, validating security requirements, configuring cloud environments to STIG and DoD standards, managing infrastructure with Terraform and Ansible, supporting AWS, Google Cloud, or Azure deployments, and assisting with Java and Python development. The role provides technical guidance and requires fully onsite support in Colorado Springs.

Leads architecture and optimization of secure cloud-native platforms, CI/CD pipelines, GitOps workflows, Kubernetes infrastructure, and infrastructure-as-code across classified and unclassified environments. Integrates shift-left security, vulnerability scanning, compliance-as-code, STIGs, NIST controls, SBOMs, and cATO processes. Oversees observability, disaster recovery, high availability, platform operations, technical standards, incident resolution, and engineering mentorship.

Lead cloud security and DevSecOps initiatives across Azure and AWS. Integrate security into CI/CD and Infrastructure as Code, develop Azure policies and compliance guardrails, secure PaaS architectures, contribute to threat modeling, and implement AI-specific security controls. The role also supports cloud security detection and response, regulatory alignment, and collaboration with DevOps, infrastructure, architecture, and application engineering teams.

Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.

Develops secure, automated CI/CD pipelines for federal law enforcement systems. Collaborates with cross-functional teams to build, test, and release software in 2–4 week sprints; troubleshoots complex DevSecOps issues; responds to client requirements; and communicates technical concepts effectively. The role requires CloudBees/Jenkins, Terraform, Git/GitHub, AWS administration, U.S. citizenship, a bachelor’s degree, and eligibility for DHS 6C Public Trust clearance.

Architects and automates secure infrastructure across on-premises and cloud environments. Designs CI/CD pipelines with integrated testing, security scanning, and compliance controls; manages Kubernetes clusters and hardened containers; develops monitoring, logging, and alerting solutions; and supports system reliability through on-call troubleshooting. The role also administers Linux environments, automates infrastructure using IaC tools, and helps maintain mission-critical applications and compliance.

Build, secure, and operate AWS infrastructure supporting AI services and federal applications. Deploy and manage production AI capabilities, cloud-native applications, infrastructure-as-code, CI/CD pipelines, containers, identity and access controls, secrets, monitoring, logging, and observability. Develop data pipelines using Python, SQL, and AWS services including S3, Glue, Lambda, and Step Functions. Establish reusable AI infrastructure patterns, support multiple application teams, troubleshoot issues, and meet security, privacy, and data-retention obligations.

Secure Virta’s cloud-native applications and platform by improving GCP and Kubernetes controls, integrating security into the software lifecycle, automating vulnerability detection and compliance, refining IAM and network security, developing security standards, supporting incident response, and promoting security awareness. The role requires hands-on application security, secure coding, vulnerability management, security testing, Terraform, and Go or Python development experience.

Build and lead testing infrastructure for a secure, containerized DoD multi-tenant system. Develop automated GitLab CI/CD pipelines, integration tests, IaC testing practices, and security compliance validation. Harden Kubernetes and Harbor deployments against DISA STIG requirements, establish testing standards, support DT&E and FAT planning, coordinate documentation reviews, and ensure systems and test data are ready for customer acceptance and fielding.

Design, maintain, and support secure DevSecOps platforms, CI/CD pipelines, infrastructure, and containerized tools across classified AWS environments. Troubleshoot Linux, AWS, authentication, container, and pipeline issues; support customer teams through ticketing and onboarding; maintain CloudFormation infrastructure, documentation, access management, security scanning, STIG compliance, and OpenShift deployments.

Designs and maintains secure CI/CD pipelines using GitLab and Jenkins, integrates security scanning and STIG validation, and manages Infrastructure as Code across AWS environments. Builds and automates Kubernetes or OpenShift infrastructure, troubleshoots Linux systems, performs root-cause analysis, supports vulnerability remediation and ATO efforts, and mentors junior engineers on secure coding, IaC, and DevSecOps practices.

Designs and maintains secure CI/CD pipelines and Infrastructure-as-Code across hybrid VMware and cloud environments. Integrates SAST, DAST, container scanning, compliance, vulnerability, and secrets-management controls into DevOps workflows. Supports secure platform migration into classified enclaves, enforces hardened configurations, and implements logging, monitoring, and alerting. Collaborates with cybersecurity and infrastructure teams to maintain system integrity, continuous compliance, and resilient mission-critical operations.

Designs and maintains secure CI/CD pipelines, infrastructure-as-code templates, containerized deployments, and AWS environments across classified domains. Integrates security scanning, STIG compliance, vulnerability remediation, and secure coding practices into development workflows. Troubleshoots complex Linux and application issues, supports ATO efforts, conducts code reviews, mentors junior engineers, and collaborates with customers and cross-functional teams.

Designs and maintains secure CI/CD pipelines across classified environments using GitLab CI, Jenkins, and integrated security validation. Builds secure AWS infrastructure with CloudFormation and other IaC tools, configures Docker and OpenShift deployments, and ensures STIG compliance. Leads troubleshooting, root cause analysis, vulnerability remediation, secure coding guidance, ATO support, code reviews, documentation, and knowledge sharing while mentoring junior engineers and collaborating with customers and cross-functional teams.

Lead secure embedded platform enablement for medical device programs by defining DevSecOps architecture, building Yocto-based Linux platforms, CI/CD automation, secure software supply chain practices (SBOM, SCA), vulnerability/CVE management, threat modeling, secure boot/firmware signing, and providing technical leadership to ensure compliant, maintainable, and secure platform solutions across products.

Build and maintain secure, resilient cloud infrastructure and CI/CD pipelines. Develop Infrastructure as Code and Pipeline as Code solutions, automate deployments and security controls, manage AWS or Azure environments, Docker containers, Kubernetes clusters, and release tooling. Assess and remediate vulnerabilities, implement NIST 800-53 controls, troubleshoot infrastructure and network issues, and improve scalability, reliability, and deployment efficiency using automation and AI-assisted development tools.

Build and maintain secure, resilient cloud infrastructure and CI/CD pipelines. Develop Infrastructure as Code and Pipeline as Code using Terraform and related automation tools, manage AWS or Azure environments, Docker containers, Kubernetes clusters, and security controls, and troubleshoot infrastructure, network, and deployment issues. The role also requires security compliance with NIST 800-53, cloud architecture assessment, Python automation, and use of AI-assisted development tools.

Supports secure cloud infrastructure, CI/CD pipelines, infrastructure-as-code, containerized environments, security automation, and compliance initiatives. Assists with AWS or Azure, Terraform, Ansible, Docker, Kubernetes, Jenkins, Spinnaker, GitHub, vulnerability remediation, troubleshooting, and cloud security controls. The role also uses Python, Bash, and AI-assisted development tools such as GitHub Copilot. This hybrid position supports federal contracting work in the Reston, Virginia and Washington, D.C. areas.

Supports secure cloud infrastructure, CI/CD pipelines, infrastructure-as-code, containerized environments, and security automation. Assists with AWS or Azure administration, Terraform and Ansible deployments, Docker and Kubernetes operations, vulnerability remediation, compliance implementation, and troubleshooting infrastructure and deployment issues. Uses Python, Bash, Jenkins, Spinnaker, GitHub, and AI-assisted tools such as GitHub Copilot to automate and secure software delivery.

Build and maintain secure cloud infrastructure and CI/CD pipelines using AWS or Azure, Terraform, Docker, Kubernetes, and automation tools. Integrate security controls into development workflows, create Infrastructure as Code and Pipeline as Code solutions, automate deployments, troubleshoot infrastructure and security issues, and support NIST 800-53 compliance. The role also requires cloud architecture assessment, Python scripting, container security, collaboration, and use of AI-assisted development tools.