Top DevSecOps Engineer Jobs

Owns and administers a self-hosted GitLab platform, GitLab CI/CD pipelines, runners, artifact repositories, and supporting DevSecOps services. Builds reusable pipeline templates, integrates security scanning and compliance controls, improves reliability and performance, and automates platform operations. Supports developers by troubleshooting workflows, providing training, and writing documentation. Requires Linux administration, Docker, scripting, security tooling integration, and an active or obtainable Top Secret clearance.

Designs, secures, automates, and operates AWS GovCloud infrastructure, Kubernetes platforms, CI/CD pipelines, and infrastructure-as-code deployments. Integrates security scanning, compliance controls, monitoring, and incident response into production operations. Supports secure deployment and operation of AI and LLM applications using services such as Amazon Bedrock, collaborating with software, AI, cloud, and cybersecurity teams.

Develops and maintains enterprise engineering toolsets, operational data platforms, mission-critical systems, and CI/CD pipelines. Collaborates across cloud, application, communications, payload, testing, and DevSecOps teams. Responsibilities include predictive analytics, database and container platform development, automation, system deployment, technical risk mitigation, stakeholder communication, and supporting cloud migration and microservices adoption. This is a full-time, on-site role requiring an active Top Secret clearance and eligibility for SCI and SAP clearances.

Designs, automates, and supports infrastructure and DevSecOps capabilities for complex software applications. Responsibilities include cloud platform engineering, infrastructure as code, CI/CD pipeline development, scripting and automation, troubleshooting, cloud security, container orchestration, and operational delivery. The role requires collaboration with distributed teams, government security compliance, and an active TS/SCI clearance with polygraph.

Leads the DevSecOps and SSDLC programs, integrating security into software development, CI/CD pipelines, cloud environments, and deployment platforms. Establishes secure development standards, governs application security tooling, performs threat modeling and code reviews, manages vulnerability remediation, and supports audits and incident response. Partners with Engineering, DevOps, Infrastructure, Platform, and GRC teams to improve security automation, monitoring, compliance, and secure software delivery across globally distributed teams.

Designs, implements, and maintains secure, scalable Microsoft Azure cloud infrastructure and platform capabilities. Builds Terraform-based Infrastructure as Code, manages Azure DevOps CI/CD pipelines, establishes security and deployment standards, monitors production environments, and supports reliability and compliance. Collaborates with engineering and architecture teams and contributes to C#/.NET applications. The role is fully in-office in Columbus, Ohio, and requires current Ohio residency.

Own secure software delivery across source, build, test, release, and deployment. Build hardened CI/CD pipelines, integrate security scanning, enforce promotion gates, automate AWS GovCloud security controls, and implement software supply chain protections. Support classified and air-gapped deployments, threat modeling, compliance evidence, and ATO activities. Partner with developers to remediate findings and with security stakeholders to map controls to NIST, DISA STIGs, RMF, and CMMC requirements.

Develops and maintains AWS cloud infrastructure, Infrastructure-as-Code, CI/CD pipelines, containerized solutions, automated testing, and secure Linux and Windows environments. Builds integrations with Python, PowerShell, and Groovy; configures identity and access resources; troubleshoots complex systems; and documents architectures and procedures. The role supports an MBSE cloud platform within an Agile Scrum team and requires collaboration across infrastructure, applications, cloud services, and security domains.

Design, build, and operate secure infrastructure and CI/CD pipelines to deliver a complex application into production. Work with a team on containerized deployments, IaC, cloud platforms, automation, and troubleshooting while meeting government security requirements.

Designs and maintains secure DevOps platforms supporting Navy software development and infrastructure. Responsibilities include GitLab CI/CD, Terraform infrastructure as code, Kubernetes automation, cloud networking, base-image hardening, risk assessments, security control validation, infrastructure testing, troubleshooting, documentation, and Agile collaboration. The role requires cloud and DevSecOps experience, Security+ certification, U.S. citizenship, quarterly and ad hoc travel, and an active interim Secret clearance.

Develop and deploy DevSecOps capabilities for defense-focused prototype systems. Responsibilities include containerizing Python applications, deploying workloads to Kubernetes, building CI pipelines and developer tooling, delivering infrastructure as code, troubleshooting Linux networking and storage, supporting cloud-native applications, and ensuring compliance with NIST, CMMC, and CIS controls.

Designs and maintains secure CI/CD pipelines and Infrastructure-as-Code across hybrid on-premises and cloud environments. Integrates security testing, vulnerability scanning, compliance checks, secrets management, logging, monitoring, and alerting into DevOps workflows. Supports secure platform migrations into classified enclaves, enforces hardened configurations, and collaborates with cybersecurity and infrastructure teams to maintain system integrity and continuous compliance.

Designs, deploys, and maintains secure Kubernetes and cloud-native infrastructure for Department of War programs. Responsibilities include Helm deployments, CI/CD automation, policy enforcement, container security, observability, AWS GovCloud and Azure Government operations, ATO and compliance support, and air-gapped or classified environment deployments. The role collaborates with development, security, government platform, and managed service teams to implement DevSecOps practices and sustain secure software factories.

Build and maintain secure cloud infrastructure, CI/CD pipelines, and infrastructure-as-code solutions. Automate security controls and deployment workflows across AWS or Azure using Terraform, Ansible, Docker, Kubernetes, Jenkins, and Spinnaker. Assess architectures for vulnerabilities, implement NIST 800-53 controls, troubleshoot infrastructure and security issues, and improve scalability, reliability, and delivery efficiency. The role also develops Python automation and uses AI-assisted tools such as GitHub Copilot.

Supports secure cloud infrastructure, DevSecOps automation, and CI/CD pipeline operations. Responsibilities include maintaining AWS or Azure environments, deploying infrastructure as code with Terraform and Ansible, managing Docker and Kubernetes platforms, integrating security controls, identifying vulnerabilities, troubleshooting deployments, and supporting NIST 800-53 compliance. The role also develops Python-based automation and uses tools such as Jenkins, Spinnaker, GitHub, and GitHub Copilot.

Designs, deploys, and maintains cloud-based (primarily AWS) infrastructure and DevSecOps pipelines using IaC and AaC. Builds CI/CD automation, configures identity services, authors test plans and documentation, troubleshoots Linux/Windows environments, and works on an Agile team delivering MBSE-supporting cloud architectures.

Owns build, test, release, developer productivity, and agent-enabled engineering infrastructure across multi-cloud customer environments. Responsibilities include creating reproducible build systems, release pipelines, software supply-chain security controls, coding-agent workflows, developer self-service tools, observability, alerting, and engineering productivity metrics. Requires strong Python, Linux, container, Kubernetes, GitOps, infrastructure-as-code, cloud, and security expertise, plus leadership of complex projects and migrations.

Designs, implements, and maintains security controls across cloud, infrastructure, endpoint, and application environments. Supports secure configurations, vulnerability remediation, logging and monitoring integration, security assessments, audits, documentation, and continuous improvement of security baselines and engineering processes.

Lead a multidisciplinary team to architect, build, and secure cloud-native systems (primarily Azure), implement GitLab CI/CD and Artifactory-driven DevSecOps pipelines, integrate with aircraft and mission systems, enforce NIST/DoD-aligned secure development practices, manage sprints and roadmaps, mentor engineers, and ensure accreditation, configuration management, and stakeholder reporting in a classified environment.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP configuration, infrastructure-as-code and policy-as-code integration, secure coding standards, vulnerability remediation, cloud workload protection, and enterprise security architecture initiatives across technology and governance teams.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-code and cloud-workload findings, and automate security controls. Implement CNAPP, CSPM, IaC, and policy-as-code solutions using Terraform or comparable tools. Establish secure coding and cloud security standards aligned with NIST, CIS, and ISO frameworks while producing architecture diagrams and implementation plans.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP, CSPM, infrastructure as code, policy as code, secure coding, cloud workload protection, and vulnerability remediation while contributing to enterprise security standards, architecture, and implementation plans.

Designs, provisions, secures, and manages cloud infrastructure across AWS, Azure, or GCP. Responsibilities include configuring and monitoring Windows, Linux, and Unix systems; implementing access controls and authentication; detecting and responding to incidents; managing vulnerabilities; building CI/CD pipelines; automating infrastructure with IaC and scripting; and deploying containerized applications using Docker and Kubernetes. The role supports cloud modernization missions and requires eligibility for a Secret clearance.

Administer, maintain, and troubleshoot Linux systems in command-line environments while supporting DevOps and CI/CD workflows. Collaborate with government personnel, developers, and engineers to assess issues, evaluate solutions, manage risks, and communicate recommendations. Create technical documentation, standard operating procedures, troubleshooting guides, and status updates to support reliable mission operations.

Build and support secure, scalable DevSecOps infrastructure for an AWS-based Kubernetes platform. Responsibilities include managing RKE2 clusters, CI/CD pipelines, Helm deployments, hardened Docker images, artifact repositories, security scanning, infrastructure optimization, and Python/Bash automation. The role also requires technical documentation, performance monitoring, compliance with government security standards, and collaboration with security stakeholders in a mission-critical environment.