Top DevSecOps Engineer Jobs

Supports DevSecOps engineering through scripting, debugging, troubleshooting, software testing, system administration, architecture discussions, and research into emerging tools and methodologies. Collaborates with development teams and senior administrators while contributing to technical projects and learning system administration practices. The intern must be a full-time college student and eligible to obtain a Top Secret U.S. government clearance.

Build and maintain secure CI/CD pipelines across on-premises, cloud, and hybrid environments. Implement Infrastructure as Code, Configuration as Code, cybersecurity controls, STIG compliance, monitoring, vulnerability remediation, configuration management, and ATO evidence processes. Develop automation scripts, support incident response, maintain software traceability, and integrate approved AI capabilities into DevSecOps workflows. The role is on-site in Linthicum Heights, Maryland, and requires an active TS/SCI clearance.

The Senior DevSecOps Engineer will secure and scale a multi-region SaaS platform, manage IAM governance and zero-trust cloud architecture, and maintain security platforms across cloud and Kubernetes environments. Responsibilities include implementing Policy-as-Code with OPA or Kyverno, conducting architectural reviews, remediating vulnerabilities, supporting compliance accreditations, mentoring engineers, and partnering across technology, security, and compliance teams.

Lead enterprise DevSecOps strategy across multi-region SaaS, multi-cloud, and Kubernetes environments. Build security platforms, establish Policy-as-Code compliance frameworks, strengthen IAM and zero-trust architectures, and embed security throughout the software development lifecycle. Drive threat modeling, application and cloud security, vulnerability management, supply-chain security, and risk reduction initiatives. Partner with engineering, compliance, and legal teams to shape security architecture, evaluate security tools, and achieve industry certifications.

Designs, implements, and manages secure AWS GovCloud infrastructure for government clients. Develops infrastructure as code, CI/CD pipelines, containerized services, cloud-native solutions, patching automation, backup and disaster recovery processes, and security controls. Provides Level 2 and Level 3 troubleshooting, compliance support, vulnerability remediation, technical documentation, and guidance to junior engineers. The role requires collaboration with development, architecture, project management, clients, partners, and vendors.

Designs, automates, secures, deploys, and operates enterprise Azure cloud platforms and delivery capabilities. Builds CI/CD pipelines, Terraform or Bicep infrastructure modules, container and serverless deployments, API Management automation, networking and security controls, observability, and platform engineering standards. The role supports production workloads across multiple environments, applies infrastructure and policy as code, automates operational processes, and collaborates with architecture, cybersecurity, infrastructure, data, integration, and application teams.

Build backend services, APIs, data workflows, AI-enabled applications, coding agents, and secure DevSecOps pipelines for government and defense customers. Establish controlled AI development environments, automated quality and security testing, compliance evidence, software supply-chain protections, and Platform One-compatible deployment workflows. Modernize legacy applications and collaborate with software, platform, cybersecurity, and mission teams to transition R&D prototypes into secure operational capabilities.

Develop and maintain Terraform-based multi-cloud infrastructure across AWS, GovCloud, GCP, and Azure. Build CI/CD pipelines, integrate cloud provisioning with a unified portal and service catalog, implement authentication and RBAC, and embed security scanning and compliance controls. Manage containerized environments, Iron Bank images, artifact repositories, and SonarQube infrastructure while supporting secure automation across cloud enclaves.

Leads secure software delivery for mission-oriented systems by architecting GitLab CI/CD pipelines, managing Kubernetes workloads, hardening containers, and enforcing policy-as-code. Develops and tests software, contributes to subsystem architecture, manages technical risks, communicates with customers, and mentors software developers. Works across Node.js, TypeScript, React, and Agile multidisciplinary environments while requiring an active government security clearance.

Builds and maintains secure cloud automation, infrastructure-as-code, CI/CD pipelines, secrets management, release automation, and deployment evidence. The role provisions and secures Azure Government and other cloud environments, supports Databricks platforms, integrates vulnerability and compliance controls, and ensures auditable, resilient deployments aligned with federal standards. Collaboration with security, architecture, SRE, QA, engineering, and government stakeholders is required.

Leads and evolves an on-premises IBM ELM environment and related DevSecOps, systems engineering, orchestration, virtualization, and infrastructure solutions. Responsibilities include infrastructure maintenance, outage support, architecture and workflow improvements, tool deployment, performance optimization, and cross-functional technical leadership. The role requires advanced DevOps and CI/CD expertise, Linux and Ansible experience, programming proficiency, and the ability to obtain and maintain a Secret clearance.

Develops and improves DevSecOps capabilities protecting AI infrastructure, cloud applications, data, and systems. Responsibilities include building secure automation and delivery pipelines, integrating security controls, managing AI-assisted development tools, conducting threat modeling and vulnerability remediation, investigating security events, monitoring telemetry, maintaining tests and documentation, and partnering with engineering and business teams in a regulated environment.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Own Supio’s infrastructure security and compliance programs, including SOC 2, HIPAA, and GDPR. Build and operate AWS, Kubernetes, Terraform, CI/CD, and observability platforms; develop production automation; manage cloud identity and access controls; and remediate infrastructure and application vulnerabilities. Partner with engineering to translate security findings into actionable improvements while establishing scalable processes in a fast-growing startup.

Engineer CI/CD pipelines, infrastructure-as-code, cloud deployment patterns, automated testing, security integrations, configuration management, and release controls. Maintain reusable automation, platform documentation, runbooks, and technical standards. Support AWS and GitLab environments, troubleshoot platform issues, improve performance, manage access, and guide development and government stakeholders. Ensure compliance with NIST, OMB/CISA guidance, STIGs, and CIS standards.

Provides principal-level technical leadership for enterprise DevSecOps and CI/CD platforms. Sets architecture and engineering direction, drives platform transformation, standardization, migrations, modernization, reliability, scalability, security, and observability. Leads responses to major platform incidents, resolves complex systemic issues, advises senior leaders, governs technical standards, influences engineering and cybersecurity direction, and mentors engineers across teams.

Leads engineering teams responsible for a large-scale enterprise CI/CD ecosystem. Owns and evolves developer platforms, delivery tools, automation, security integration, observability, and reliability practices. Guides DevSecOps engineers, drives platform modernization, standardization, migration, and legacy retirement, and provides technical leadership across engineering, infrastructure, cybersecurity, architecture, and senior leadership. Resolves complex production incidents and cross-department dependencies while balancing security, stability, modernization, and developer experience.

Designs and maintains secure CI/CD pipelines for a mission-critical platform supporting classified Intelligence Community environments. Automates builds, testing, artifact management, containerized deployments, infrastructure provisioning, security scanning, GitOps workflows, and policy enforcement. Generates security evidence for RMF authorization and continuous ATO, monitors pipeline performance, troubleshoots failures, coordinates releases, and guides development teams in standardized DevSecOps practices.

Lead the architecture and continuous improvement of secure CI/CD and GitOps pipelines supporting classified enterprise platforms. Establish automation, infrastructure-as-code, artifact promotion, security scanning, policy enforcement, SBOM, and continuous authorization practices across environments. Deploy containerized workloads, improve pipeline reliability and delivery metrics, resolve complex deployment issues, document standards, and mentor engineers. Collaborate with architects, cybersecurity, testing, and operations teams to deliver compliant, reliable software to mission users.

Supports secure CI/CD pipeline development, maintenance, troubleshooting, and automation for containerized platforms across classified environments. Integrates security scanning, artifact management, infrastructure as code, SBOM generation, and compliance evidence for RMF and continuous ATO. Collaborates with DevSecOps, platform, cybersecurity, integration, and test teams to improve software delivery reliability, coordinate releases, document procedures, and promote standardized DevSecOps practices.

Designs, implements, tests, and sustains hybrid cloud environments supporting NORAD systems. The engineer coordinates with cloud providers, vendors, and engineering teams; provisions services using Terraform; ensures cybersecurity and Authority to Operate compliance; develops architectural diagrams; advises leadership on integration and sustainment; and supports risk management, scheduling, documentation, and stakeholder updates in a classified environment.

Design and maintain secure CI/CD pipelines, AWS infrastructure, Terraform modules, Kubernetes environments, and observability systems. Integrate DevOps and security tooling to automate compliance evidence collection, continuous monitoring, remediation, and authorization workflows. Support FedRAMP and other regulated environments while troubleshooting production issues, documenting systems, and improving deployment reliability. Serve as a technical bridge between customers and engineering teams across cloud, hybrid, and classified environments.

Deploys and operationalizes the Kovr AI Platform across cloud, hybrid, and classified environments. Designs secure CI/CD pipelines, manages AWS infrastructure with Terraform, administers Kubernetes/EKS workloads, implements NIST-aligned controls, and integrates DevOps and security tooling. The role develops observability strategies, supports continuous monitoring and audit readiness, troubleshoots production issues, documents infrastructure, and engages customers on technical deployment challenges.

Builds and operates secure development, deployment, and infrastructure systems for microservice applications. Responsibilities include automating delivery processes, maintaining Docker and Kubernetes environments, developing Helm charts and manifests, managing GitLab CI/CD pipelines and GitOps deployments with Argo CD, troubleshooting distributed systems, and integrating security, scanning, networking, authentication, secrets management, and observability across the software delivery lifecycle.

Provides DevSecOps and cybersecurity engineering across Agile SDLC and CI/CD environments. Integrates security controls, automated testing, vulnerability remediation, and shift-left practices into software development. Translates RMF, NIST, DoD STIG, and SRG requirements into technical controls and engineering tasks. Advises teams on secure APIs, microservices, containers, cloud-native architectures, authentication, encryption, and network segmentation while coordinating multiple projects and stakeholders.