Top Remote DevSecOps Engineer Jobs

Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.

Lead DevSecOps engineer on the Infrastructure and Platform Services team responsible for implementing and operating global SaaS infrastructure security. Duties include file integrity monitoring, automating audit evidence collection, hardening base images, securing containerized applications, release automation, incident response via on-call rotation, and collaborating with engineering and cybersecurity to meet compliance (FedRAMP, ISO, SOC) and remediation SLAs.

Design, harden, and maintain secure, scalable AWS and Kubernetes infrastructure using Terraform. Harden hosts, manage Linux/Windows VMs and Active Directory, secure CI/CD, support vulnerability management, compliance/audits, incident response, runbooks, and operational troubleshooting for regulated and production environments.

Lead and mentor DevSecOps efforts across cloud environments: implement vulnerability scanning/remediation, certificate and key management, IAM, security monitoring analytics, automate secure CI/CD pipelines using IaC and tooling, and embed security into development lifecycle.

Support integration of a hybrid mainframe-to-cloud prototype by implementing secure network connectivity, Kubernetes container platforms, CI/CD and IaC automation, system integrations (APIs, messaging), DevSecOps security controls, and environment operations. Assist troubleshooting, testing, documentation, and knowledge transfer while aligning deployments with DoD security requirements.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Lead DevSecOps engineer responsible for IaC (Terraform), AWS provisioning and sizing, RDS maintenance, certificate lifecycle, security tooling and testing, monitoring integrations (New Relic, Splunk, Datadog), CI/CD pipelines (Jenkins/CBCore), dashboarding, incident response, and cross-account IAM/network configuration for healthcare-focused infrastructure.

Design, implement, and maintain secure CI/CD pipelines and cloud-native infrastructure. Integrate SAST/DAST/SCA and automated compliance checks, secure container and Kubernetes workloads, automate security tasks with Python/Java, and collaborate with development and operations teams to embed security across the software delivery lifecycle. Lead incident monitoring, remediation, and DevSecOps maturity efforts across AWS/Azure/GCP environments.

Lead platform security across AWS/EKS: harden supply chain, secrets, IAM, container integrity; build policy-as-code, compliance automation (HITRUST/SOC2), CI/CD security, and operationalize platform security controls while contributing hands-on to infrastructure, observability, and on-call support.

Design, build, and operate secure Azure CI/CD pipelines and cloud infrastructure as code. Enforce policy-as-code, remediate security findings, manage identity and secrets, implement secure network architectures, and enable safe feature delivery while partnering with engineering teams to maintain delivery velocity.

Support federal client by integrating security into CI/CD and cloud workflows: maintain pipelines, implement IaC, add security scans (SAST/DAST), manage AWS/Azure/GCP infrastructure, containerize with Docker/Kubernetes, monitor and respond to incidents, document controls, and apply federal security frameworks (NIST/FISMA/FedRAMP).

Design, build, and maintain automated CI/CD pipelines and scalable AWS infrastructure; integrate DevSecOps security practices (NIST, DoD SRG); implement monitoring and incident response; mentor engineers; define DevOps strategy, documentation, and deliverables for a large enterprise platform.

Design, deploy, operate, and maintain secure cloud products and services. Automate vulnerability mitigation and coordinate remediation activities. Define system requirements and architectures, ensure compliance with open systems standards, develop information management solutions across platforms and APIs, analyze workflows and implement improvements, and provide daily supervision and guidance to assigned staff.

Design, build, and deploy a secure, high-volume integration across Salesforce, S-Docs, AWS, and VA Notify. Assess architecture for scalability, security, and compliance; implement serverless AWS components; develop Salesforce integrations and templates; integrate automated security scanning into CI/CD; document designs and support ATO/RMF compliance and testing.

Lead design, implementation, and maintenance of enterprise DevSecOps solutions and CI/CD pipelines. Integrate security (SAST/DAST/SCA, container/image scanning, secret detection, fuzz testing) and testing (functional, integration, performance) across the SDLC. Build IaC for hybrid cloud/on-prem environments (Azure/AKS), support ATO/compliance (NIST 800-53, Zero Trust, M-21-31), mentor teams, and drive DevSecOps automation, audit readiness, and continuous improvement.

Own and harden cloud-native security across AWS/EKS and related systems. Triage and remediate scanner findings, embed security checks into CI/CD and PDLC, collaborate with DevOps and engineering, and expand guardrails to make security native to shipping workflows.

Own end-to-end security for Campminder: architect and harden identity, access, and cloud-native infrastructure; integrate SAST/DAST/SCA into CI/CD; manage vulnerability scanning, WAF, EDR/DLP and SIEM/XDR; administer secrets and vaults; execute PCI technical controls and ASV scans; harden containers and Kubernetes; coordinate pen tests and remediation; run security awareness training and maintain AI governance.

The role involves building and supporting infrastructure, improving developer tooling, and managing networking and security while gaining experience in DevSecOps practices.

Implement DevSecOps CI/CD pipelines, containerize monolithic applications into microservices, integrate security throughout the SDLC, automate security testing and deployments, and lead DevOps/TDD practices across on-prem and cloud environments for mission-critical government systems.

Lead design and build of a hardened CI/CD delivery platform in an IL-5 government cloud. Own pipeline, IaC, container strategy, security controls, SBOM and authorization artifacts, run observability and release metrics, and guide a small platform team while supporting ATO/cATO processes and customer accreditation.

Lead and build a hardened DevSecOps delivery platform for an AI program in AWS GovCloud IL-5. Own CI/CD, IaC, security controls, evidence generation for authorization, observability, and release cadence. Deploy initial platform into government environment, drive government prerequisites, and lead a small platform/cloud/cyber engineering team while remaining hands-on.

Support and operate cloud-based cyber data systems for government customers. Build observability, monitor data ingestion and storage pipelines, produce dashboards, administer cloud infrastructure, automate via IaC and scripting, follow IT best practices, troubleshoot operations, and collaborate in an Agile DevOps team while maintaining documentation.

Early-career DevSecOps role focused on securing and automating Binance infrastructure: design/deploy AWS security measures, harden systems, analyze logs for threats, perform access and vulnerability assessments, and build or leverage LLMs for anomaly detection.

Design, build, and maintain secure, cloud-native software and microservices on GCP. Develop APIs, deploy/manage GKE and Confidential Compute using IaC, implement CI/CD, configure monitoring/logging, collaborate on security (OWASP), and support analytics integration for SOCEUR HTAP mission.