Top DevSecOps Engineer Jobs

Lead cybersecurity accreditation and DevSecOps security engineering for U.S. Navy and Department of War systems. Responsibilities include RMF and ATO activities, continuous monitoring, vulnerability management, STIG compliance, POA&M remediation, secure CI/CD pipelines, Kubernetes and virtualization security, ICAM and Zero Trust implementation, authorization documentation, patching, system hardening, and ISSO duties. The role coordinates with government security stakeholders and supports on-site mission systems.

Design, build, and maintain secure on‑prem and cloud infrastructure and CI/CD pipelines for Kubernetes-based services. Automate deployments, manage production/staging/dev environments, monitor logs and system health, enforce security controls, and support accreditation (A&A) and operational readiness. Troubleshoot incidents, perform root cause analysis, maintain documentation, and collaborate with Agile teams to drive DevSecOps best practices.

Design, build, and maintain secure automated CI/CD pipelines and enterprise SecOps platforms. Integrate security across the SDLC, perform pipeline and code reviews, mentor teams on secure coding, and drive vulnerability remediation and secure package/dependency management for applications across hybrid, multi-classification environments.

Develops, secures, deploys, and supports PACER and court-record systems across the software lifecycle. Responsibilities include building applications and web services, managing CI/CD pipelines, containerized applications, cloud technologies, source control, vulnerability remediation, PCI and FISMA compliance, architecture, testing, performance tuning, disaster recovery, documentation, and Agile collaboration. The role also provides technical support, stakeholder communication, training, and recommendations for emerging technologies.

Develop, secure, deploy, operate, and support PACER and related court-record systems. Build enterprise software and secure web services, manage DevSecOps pipelines, remediate vulnerabilities, maintain compliance with PCI, ATO, and FISMA requirements, and support cloud and containerized applications. Responsibilities also include architecture, testing, performance tuning, disaster recovery, configuration management, documentation, stakeholder collaboration, and Agile ceremonies.

Leads DevSecOps strategy and implementation for a large-scale intelligence software modernization program. Designs secure CI/CD and data pipelines, containerized environments, infrastructure-as-code solutions, security automation, observability, and modernization assessment frameworks. Establishes standardized architectures, tools, templates, and delivery practices across teams while mentoring engineers and aligning with systems and solution architects. Ensures secure, reliable, compliant, and scalable software delivery for high-security mission environments.

Build and operate secure infrastructure for microservice applications. Responsibilities include creating CI/CD pipelines, managing Docker and Kubernetes deployments, developing Helm charts, implementing GitOps with Argo CD, automating infrastructure, integrating vulnerability scanning and security controls, supporting zero-trust patterns, improving observability, troubleshooting distributed systems, and collaborating with engineering and security teams. The role requires a current TS/SCI clearance, U.S. citizenship, and a hybrid onsite schedule at Fort Bragg, North Carolina.

Own AWS and Kubernetes infrastructure while leading security and compliance activities. Responsibilities include operating and migrating workloads to EKS, maintaining secure CI/CD pipelines, automating infrastructure, managing SOC 2 controls in Vanta, handling vulnerabilities and AWS security alerts, administering access policies, supporting threat modeling, coordinating penetration tests, and improving security awareness.

Designs and maintains AWS-based DevSecOps architectures and CI/CD pipelines, including automated testing, security scanning, infrastructure as code, container deployment, release controls, monitoring, and compliance automation. Integrates pipelines with CMDB, asset management, and observability platforms; develops governance dashboards and metrics; ensures adherence to security, privacy, and credentialing policies; and coaches technical teams on secure development and automation practices.

Automates provisioning, hardening, deployment, compliance, and sustainment of Air Force applications in AWS GovCloud. Builds Infrastructure as Code and DevSecOps pipelines, automates STIG compliance, configures AWS security controls, supports Kubernetes, implements encryption and Zero Trust controls, monitors cloud environments, troubleshoots issues, and maintains documentation and configuration baselines.

Designs and governs secure, scalable CI/CD pipelines and Software Factories across federal programs. Integrates vulnerability scanning, SAST/DAST, compliance checks, artifact management, configuration management, and automated deployment. Provides technical leadership, troubleshooting, mentorship, cloud adoption guidance, and DevSecOps standardization across distributed teams using cloud-native and containerization technologies.

Lead security-focused DevSecOps efforts for Cisco AI products by embedding security throughout the SDLC, integrating security testing into CI pipelines, managing vulnerabilities and compliance, conducting architecture reviews, threat modeling, red teaming, and maintaining organizational risk registers. Secure cloud infrastructure, runtime workloads, and Infrastructure as Code across major cloud platforms while improving developer remediation workflows.

Lead security engineering for Cisco AI products by embedding shift-left security into the SDLC, integrating security testing into CI pipelines, managing vulnerabilities and compliance, conducting architecture reviews, threat modeling, red teaming, and maintaining risk registers. Secure cloud workloads and infrastructure across AWS, GCP, and Azure using cloud security platforms and Infrastructure as Code controls.

Supports software integration across aerospace programs, implements DevSecOps and CI/CD practices, manages configuration and code-quality tools, develops automation scripts, modernizes aerospace software infrastructure, and monitors build-system health and metrics. The role also requires cross-functional collaboration and leadership of integration activities.

Designs and operates secure CI/CD pipelines, cloud infrastructure, infrastructure-as-code, automated security testing, and security controls across containers, Kubernetes, APIs, and enterprise applications. The role integrates vulnerability management, threat modeling, compliance, policy-as-code, incident support, documentation, and secure software delivery practices while partnering with developers, architects, platform teams, and cybersecurity stakeholders.

Build and operate infrastructure for complex software applications. Responsibilities include supporting DevSecOps delivery, cloud platforms, infrastructure as code, CI/CD pipelines, containerized applications, Kubernetes orchestration, scripting, automation, troubleshooting, and security-focused deployment practices. The role collaborates with technical teams and requires an active TS/SCI clearance, IAT certification eligibility, and up to 10% continental U.S. travel.

Secure CI/CD pipelines and cloud infrastructure through automated SAST, DAST, vulnerability scanning, IaC enforcement, container security, secrets management, and observability. The intern will use Terraform, Docker, Vault, and monitoring tools to protect applications and AI agents, collaborate with developers on vulnerability remediation, and implement security controls for Node.js, React, and LLM-based systems.

Lead and operate secure CI/CD pipelines using Jenkins and GitLab CI/CD. Integrate SAST, DAST, dependency, container, and infrastructure security scanning; automate testing; manage vulnerabilities; and enforce government security compliance. Design Policy-as-Code workflows and improve security across multi-environment platforms. Responsibilities include Kubernetes security, secrets management, GitOps delivery, observability, Linux administration, infrastructure automation, and collaboration with development teams.

Secures CI/CD pipelines, cloud infrastructure, software supply chains, and MLOps workflows. Builds controls for AI and LLM security, threat models AI systems, and develops internal AI agents for security automation. Partners with engineering teams on secure development practices, manages secrets and Kubernetes hardening, supports incident response, and reports on DevSecOps maturity and AI security posture.

Architects and secures cloud-native Kubernetes infrastructure, including highly available Keycloak and Okta-integrated identity services. Builds CI/CD pipelines with automated testing and vulnerability scanning, manages Helm deployments, secrets, TLS, network policies, and container security. Maintains PostgreSQL and S3 infrastructure while establishing centralized monitoring, logging, and alerting. Requires extensive DevSecOps, cloud infrastructure, Kubernetes, IAM, and enterprise Linux experience, along with U.S. citizenship and eligibility for a Public Trust background check.

Develop and maintain DevOps and DevSecOps solutions across the software development lifecycle. Automate CI/CD pipelines, infrastructure provisioning, testing, deployment, and production monitoring using cloud platforms, containers, scripting, and open-source tools. Collaborate with application development teams to solve complex technical problems, improve continuous automation, and support secure software delivery. The role requires Secret clearance, a bachelor's degree, and the ability to obtain DoD IAT certification.

Own and scale Greenboard’s security posture across infrastructure, applications, networks, endpoints, and development workflows. Responsibilities include vulnerability remediation, penetration testing, secure SDLC controls, secrets and access management, infrastructure hardening, SOC 2/GDPR/ISO 42001 compliance, vendor reviews, customer security diligence, and endpoint security. This first dedicated security hire will establish security processes, support international expansion, and communicate risks across engineering, compliance, sales, and business teams.

Leads architecture and optimization of secure cloud-native platforms, CI/CD pipelines, GitOps workflows, Kubernetes infrastructure, and infrastructure-as-code across classified and unclassified environments. Integrates shift-left security, vulnerability scanning, compliance-as-code, STIGs, NIST controls, SBOMs, and cATO processes. Oversees observability, disaster recovery, high availability, platform operations, technical standards, incident resolution, and engineering mentorship.

Build and maintain secure automated CI/CD pipelines for .NET applications across on-premises and cloud environments. Integrate security throughout development and operations, mentor development teams on secure coding, improve application security, and maintain compliance with federal customer requirements. The role supports classified government applications, requires active Top Secret clearance with SCI access, and may involve essential-personnel duties during emergencies or government shutdowns.

Designs and maintains DevSecOps tooling, security controls, hardened systems, automation, and infrastructure-as-code. Administers Kubernetes across hybrid cloud and on-premises defense environments, manages GitLab CI/CD and Azure infrastructure, integrates security scanning tools, and supports platform architecture roadmaps. The role requires strong Linux, cloud, scripting, containerization, IAM, and cybersecurity expertise, along with the ability to operate in restricted or air-gapped environments and support DoD compliance requirements.