Top Remote DevSecOps Engineer Jobs

Own and mature the company’s DevSecOps and cloud security function. Responsibilities include implementing SOC 2 controls, automating compliance evidence, managing cloud security posture and runtime security, embedding security gates into CI/CD, leading vulnerability remediation, developing auto-remediation and AI-assisted workflows, and securing infrastructure through Terraform and policy-as-code. The role also partners with GRC and corporate security teams while building reusable security tooling and developer-platform guardrails.

Operate and maintain multi-cloud AWS, Azure, OCI, and GCP environments using Infrastructure as Code and SRE practices. Develop CI/CD automation, scripts, and deployment infrastructure across Dev, Test, and Production environments. Improve observability, resilience, IAM, networking, and security governance while onboarding FedRAMP cloud services. The role requires cloud experience across at least four relevant areas, including Kubernetes, Terraform, CI/CD, scripting, security testing, and cloud architecture.

Administers and supports Omnissa Workspace ONE, Microsoft Intune, and macOS endpoints while developing ServiceNow and Power BI dashboards, KPIs, and executive reports. Automates reporting and operational workflows using Power Automate, PowerShell, Python, and APIs. Monitors endpoint compliance, system health, and security posture; partners with engineering, security, and operations teams; and documents incidents, resolutions, and change-management activities.

Supports DevSecOps engineering through scripting, debugging, troubleshooting, software testing, system administration, architecture discussions, and research into emerging tools and methodologies. Collaborates with development teams and senior administrators while contributing to technical projects and learning system administration practices. The intern must be a full-time college student and eligible to obtain a Top Secret U.S. government clearance.

Build backend services, APIs, data workflows, AI-enabled applications, coding agents, and secure DevSecOps pipelines for government and defense customers. Establish controlled AI development environments, automated quality and security testing, compliance evidence, software supply-chain protections, and Platform One-compatible deployment workflows. Modernize legacy applications and collaborate with software, platform, cybersecurity, and mission teams to transition R&D prototypes into secure operational capabilities.

Designs and operates secure cloud infrastructure for enterprise government applications. Responsibilities include AWS cloud architecture, infrastructure as code, CI/CD, containerization, Kubernetes orchestration, identity and access management, FedRAMP compliance, observability, automated testing, and secure DevSecOps practices. The role collaborates across Python and TypeScript codebases, improves developer experience, supports transparent open-source development, and uses AI coding tools to accelerate high-quality delivery.

Build and operate reliable, secure AWS infrastructure and production services. Responsibilities include managing Aurora/PostgreSQL, containers, infrastructure as code, CI/CD, deployment rollbacks, observability, load testing, security controls, compliance evidence, incident response, on-call support, and root-cause analysis for complex systems. The role requires collaboration with clients and overlap with US business hours while maintaining high ownership and delivery standards.

Operate and improve AWS-based infrastructure and complex production systems. Build infrastructure as code, containerized deployments, CI/CD pipelines, monitoring, observability, rollback processes, and load-testing practices. Manage Aurora/PostgreSQL reliability, security hardening, vulnerability scanning, compliance evidence, incident response, on-call rotations, and root-cause analysis. Collaborate with clients and teams while supporting secure, multi-tenant environments and audit-sensitive workloads.

Build and automate Azure infrastructure pipelines using Terraform, Azure Bicep, Ansible, and Azure DevOps. Develop OS hardening and DISA STIG compliance playbooks, secure CI/CD pipelines, vulnerability scanning, IaC policy enforcement, AKS and container registry deployments, and security telemetry integrations. The role requires managing Azure networks, virtual machines, storage, and production-grade DevSecOps infrastructure while collaborating with government and contractor architects.

Build and sustain secure Kubernetes platforms and cloud-native environments using Big Bang, Helm, Terraform, and GitOps. Develop secure CI/CD pipelines, manage Kubernetes security controls, remediate vulnerabilities, and enforce DISA STIG, NIST, and RMF compliance. Support monitoring, automated patching, configuration management, ATO activities, security evidence collection, and POA&M updates across mission-critical DoD environments.

Lead enterprise software supply chain security initiatives, including Sonatype and repository governance, open-source software policies, artifact signing, SLSA provenance, SBOM integration, vulnerability remediation, and CI/CD security automation. Design repository strategies, approval workflows, reporting capabilities, and ecosystem onboarding while partnering with security and development teams. The role requires extensive DevSecOps experience, AWS expertise, scripting skills, and knowledge of secure software development frameworks.

Designs and operates secure AWS cloud environments through DevSecOps automation, infrastructure as code, CI/CD security testing, firewall and network security, container security, identity controls, and automated incident response. The role manages AWS infrastructure, virtualized next-generation firewalls, compliance guardrails, monitoring, remediation, and hybrid systems while supporting NIWC Atlantic mission requirements.

Integrate security into software delivery and infrastructure workflows across AWS and GCP. Build scanning into CI/CD pipelines, maintain security guardrails, secure containerized workloads, implement least-privilege access and secrets management, and support compliance with SC TRM and BNM RMiT. Improve monitoring, vulnerability reporting, incident readiness, and secure delivery practices while collaborating with platform and engineering teams using multiple programming languages.

Designs and maintains secure CI/CD pipelines, integrates automated security controls and testing, supports containerized and cloud-native environments, and performs vulnerability management, remediation, security assessments, and incident response. Collaborates with development, security, architecture, and operations teams to resolve risks and documents DevSecOps processes and integrations for a federal government client.

Build and maintain secure CI/CD pipelines, hardened Kubernetes environments, and automated compliance controls for Navy and DoD deployments. Responsibilities include Infrastructure as Code, GitOps, SBOM generation, vulnerability scanning, DISA STIG compliance, secrets management, ATO evidence automation, and deployment infrastructure across cloud and air-gapped environments. The engineer partners with software and security teams, contributes to application development, uses AI tools to improve workflows, and maintains operational documentation.

Owns an Agentic AI platform across CI/CD, AWS infrastructure, Kubernetes operations, observability, security, and runtime reliability. Builds delivery pipelines, automated testing and quality gates, EKS environments, infrastructure-as-code, monitoring and alerting, synthetic health checks, and runtime security testing. The role requires strong operational ownership, troubleshooting, secure supply-chain practices, audit readiness, and platform resilience in regulated or mission-focused environments.

Develops, secures, deploys, and supports PACER and court-record systems across the software lifecycle. Responsibilities include building applications and web services, managing CI/CD pipelines, containerized applications, cloud technologies, source control, vulnerability remediation, PCI and FISMA compliance, architecture, testing, performance tuning, disaster recovery, documentation, and Agile collaboration. The role also provides technical support, stakeholder communication, training, and recommendations for emerging technologies.

Develop, secure, deploy, operate, and support PACER and related court-record systems. Build enterprise software and secure web services, manage DevSecOps pipelines, remediate vulnerabilities, maintain compliance with PCI, ATO, and FISMA requirements, and support cloud and containerized applications. Responsibilities also include architecture, testing, performance tuning, disaster recovery, configuration management, documentation, stakeholder collaboration, and Agile ceremonies.

Designs and maintains secure DevOps platforms supporting Navy software development and infrastructure. Responsibilities include GitLab CI/CD, Terraform infrastructure as code, Kubernetes automation, cloud networking, base-image hardening, risk assessments, security control validation, infrastructure testing, troubleshooting, documentation, and Agile collaboration. The role requires cloud and DevSecOps experience, Security+ certification, U.S. citizenship, quarterly and ad hoc travel, and an active interim Secret clearance.

Manage cloud security across AWS, Azure, and classified environments. Design secure software development practices, automated CI/CD security pipelines, infrastructure-as-code and compliance-as-code solutions, cloud access controls, observability, and container security for Kubernetes and Helm. Support critical applications, participate in Agile delivery, and communicate security findings to stakeholders. The role requires strong DevSecOps experience, networking knowledge, scripting skills, and an active or attainable TS/SCI clearance.

Designs, deploys, and maintains secure Kubernetes and cloud-native infrastructure for Department of War programs. Responsibilities include Helm deployments, CI/CD automation, policy enforcement, container security, observability, AWS GovCloud and Azure Government operations, ATO and compliance support, and air-gapped or classified environment deployments. The role collaborates with development, security, government platform, and managed service teams to implement DevSecOps practices and sustain secure software factories.

Independently manages AWS infrastructure, Terraform-based deployments, cloud security, IAM, access controls, DevSecOps, production monitoring, compliance, SOC 2 audits, vulnerability remediation, disaster recovery, endpoint security, and SageMaker environments. Supports segregation of duties, secure client onboarding, security training, documentation, and production troubleshooting across remote, US business hours.

Lead a multidisciplinary team to architect, build, and secure cloud-native systems (primarily Azure), implement GitLab CI/CD and Artifactory-driven DevSecOps pipelines, integrate with aircraft and mission systems, enforce NIST/DoD-aligned secure development practices, manage sprints and roadmaps, mentor engineers, and ensure accreditation, configuration management, and stakeholder reporting in a classified environment.

Designs, deploys, and operates secure, scalable AWS cloud infrastructure for VA migration initiatives. Responsibilities include CI/CD automation, infrastructure as code, cloud architecture diagrams, permissions management, monitoring, security compliance, cost optimization, troubleshooting, and support for AWS GovCloud environments. The engineer will configure VAEC environments, address cloud-readiness gaps, document solutions, mentor junior staff, lead technical projects, collaborate across teams, and participate in on-call support.

Own Tradeify’s cloud infrastructure, CI/CD pipelines, containerized deployments, observability, databases, vulnerability management, access controls, security monitoring, incident response, and compliance readiness. The role combines hands-on DevOps and security operations, including AWS administration, infrastructure as code, secure deployment practices, remediation tracking, runbook development, and security reviews. It partners closely with engineering to improve release reliability and maintain a secure, high-performance trading platform.