Top Remote DevSecOps Engineer Jobs

Provides technical leadership for DevSecOps, platform operations, CI/CD, customer deployments, and production reliability. Defines deployment architecture and automation using Kubernetes, Terraform, Helm, Docker, and GitOps; leads vulnerability management, secure supply-chain practices, identity integration, observability, incident response, and security authorization evidence. Partners directly with government and mission stakeholders, deploys software into classified environments, guides engineers, and drives architectural improvements across internal and customer systems.

Leads the design, deployment, operation, maintenance, and scaling of secure cloud infrastructure and supporting applications. Builds automated CI/CD pipelines, scripts, source-control processes, testing, release management, and cloud environments across development through production. Collaborates with developers, production support, and information security to improve automation, governance, compliance, and reliable product delivery using DevSecOps and Agile practices.

Performs application security across the software development lifecycle, including secure architecture analysis, code reviews, CI/CD security integration, SAST/DAST/SCA testing, vulnerability remediation, incident response, secure coding guidance, and risk reporting. Coordinates DevSecOps activities with development, architecture, operations, and project teams while facilitating Agile ceremonies and managing backlog priorities.

Build and secure CI/CD pipelines for an enterprise data platform in a cloud environment, preferably Azure. Responsibilities include automated security scanning, policy enforcement, secrets and credential management, Zero Trust implementation, infrastructure as code, continuous compliance, ATO evidence collection, and collaboration with cloud, data, governance, and security teams. The role is fully remote and contingent on contract award.

Designs and secures AWS and Kubernetes cloud platforms, CI/CD pipelines, infrastructure-as-code solutions, container deployments, and security automation. Integrates vulnerability scanning, compliance monitoring, identity controls, zero-trust principles, and least-privilege access. Troubleshoots complex cloud, application, networking, and operating-system issues; improves cost efficiency and developer workflows; supports regulated and government environments; leads technical discussions, mentors engineers, and promotes secure engineering practices.

Supports an enterprise application security program by administering application security testing and posture management tools, integrating security solutions into CI/CD pipelines, managing vulnerability findings, and writing Python scripts to automate workflows. The role also contributes to container and artifact security, including image scanning, vulnerability assessment, and dependency validation using tools such as Snyk and JFrog Artifactory.

Develops, secures, deploys, and supports PACER and court-record systems across the software lifecycle. Responsibilities include building applications and web services, managing CI/CD pipelines, containerized applications, cloud technologies, source control, vulnerability remediation, PCI and FISMA compliance, architecture, testing, performance tuning, disaster recovery, documentation, and Agile collaboration. The role also provides technical support, stakeholder communication, training, and recommendations for emerging technologies.

Develop, secure, deploy, operate, and support PACER and related court-record systems. Build enterprise software and secure web services, manage DevSecOps pipelines, remediate vulnerabilities, maintain compliance with PCI, ATO, and FISMA requirements, and support cloud and containerized applications. Responsibilities also include architecture, testing, performance tuning, disaster recovery, configuration management, documentation, stakeholder collaboration, and Agile ceremonies.

Designs and governs secure, scalable CI/CD pipelines and Software Factories across federal programs. Integrates vulnerability scanning, SAST/DAST, compliance checks, artifact management, configuration management, and automated deployment. Provides technical leadership, troubleshooting, mentorship, cloud adoption guidance, and DevSecOps standardization across distributed teams using cloud-native and containerization technologies.

Secure CI/CD pipelines and cloud infrastructure through automated SAST, DAST, vulnerability scanning, IaC enforcement, container security, secrets management, and observability. The intern will use Terraform, Docker, Vault, and monitoring tools to protect applications and AI agents, collaborate with developers on vulnerability remediation, and implement security controls for Node.js, React, and LLM-based systems.

Design and operate secure Azure infrastructure, infrastructure-as-code modules, CI/CD security controls, vulnerability management, and penetration testing programs. Deploy and monitor internal security, IT, and AI tools using containers, identity, secrets management, telemetry, dashboards, and alerts. Partner with engineering, DevOps, IT, security teams, and external vendors while documenting procedures and producing SOC 2 evidence.

Operate and maintain multi-cloud AWS, Azure, OCI, and GCP environments using Infrastructure as Code and SRE practices. Develop CI/CD automation, scripts, and deployment infrastructure across Dev, Test, and Production environments. Improve observability, resilience, IAM, networking, and security governance while onboarding FedRAMP cloud services. The role requires cloud experience across at least four relevant areas, including Kubernetes, Terraform, CI/CD, scripting, security testing, and cloud architecture.

Administers and supports Omnissa Workspace ONE, Microsoft Intune, and macOS endpoints while developing ServiceNow and Power BI dashboards, KPIs, and executive reports. Automates reporting and operational workflows using Power Automate, PowerShell, Python, and APIs. Monitors endpoint compliance, system health, and security posture; partners with engineering, security, and operations teams; and documents incidents, resolutions, and change-management activities.

Supports DevSecOps engineering through scripting, debugging, troubleshooting, software testing, system administration, architecture discussions, and research into emerging tools and methodologies. Collaborates with development teams and senior administrators while contributing to technical projects and learning system administration practices. The intern must be a full-time college student and eligible to obtain a Top Secret U.S. government clearance.

Build backend services, APIs, data workflows, AI-enabled applications, coding agents, and secure DevSecOps pipelines for government and defense customers. Establish controlled AI development environments, automated quality and security testing, compliance evidence, software supply-chain protections, and Platform One-compatible deployment workflows. Modernize legacy applications and collaborate with software, platform, cybersecurity, and mission teams to transition R&D prototypes into secure operational capabilities.

Develops and improves DevSecOps capabilities protecting AI infrastructure, cloud applications, data, and systems. Responsibilities include building secure automation and delivery pipelines, integrating security controls, managing AI-assisted development tools, conducting threat modeling and vulnerability remediation, investigating security events, monitoring telemetry, maintaining tests and documentation, and partnering with engineering and business teams in a regulated environment.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Engineer CI/CD pipelines, infrastructure-as-code, cloud deployment patterns, automated testing, security integrations, configuration management, and release controls. Maintain reusable automation, platform documentation, runbooks, and technical standards. Support AWS and GitLab environments, troubleshoot platform issues, improve performance, manage access, and guide development and government stakeholders. Ensure compliance with NIST, OMB/CISA guidance, STIGs, and CIS standards.

Builds secure, reusable infrastructure as code, CI/CD pipelines, migration scripts, and automated validation for enterprise cloud migrations to Azure and AWS. The role embeds security, compliance, identity, configuration, and operational controls into deployment workflows, supports migration and recovery activities, maintains documentation and source control, and guides junior engineers. It also requires infrastructure administration, monitoring, incident response, network and virtualization expertise, and collaboration with platform, security, and migration teams.

Owns an Agentic AI platform across CI/CD, AWS infrastructure, Kubernetes operations, observability, security, and runtime reliability. Builds delivery pipelines, automated testing and quality gates, EKS environments, infrastructure-as-code, monitoring and alerting, synthetic health checks, and runtime security testing. The role requires strong operational ownership, troubleshooting, secure supply-chain practices, audit readiness, and platform resilience in regulated or mission-focused environments.

Build and automate Azure infrastructure pipelines using Terraform, Azure Bicep, Ansible, and Azure DevOps. Develop OS hardening and DISA STIG compliance playbooks, secure CI/CD pipelines, vulnerability scanning, IaC policy enforcement, AKS and container registry deployments, and security telemetry integrations. The role requires managing Azure networks, virtual machines, storage, and production-grade DevSecOps infrastructure while collaborating with government and contractor architects.

Build and sustain secure Kubernetes platforms and cloud-native environments using Big Bang, Helm, Terraform, and GitOps. Develop secure CI/CD pipelines, manage Kubernetes security controls, remediate vulnerabilities, and enforce DISA STIG, NIST, and RMF compliance. Support monitoring, automated patching, configuration management, ATO activities, security evidence collection, and POA&M updates across mission-critical DoD environments.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Design, automate, secure, and operate multi-cloud platform environments across Azure and AWS. Build infrastructure as code, CI/CD pipelines, containerized services, observability, security controls, and enterprise data-platform integrations. Troubleshoot incidents, improve resiliency and performance, support governance and analytics services, document architecture and procedures, and provide technical leadership while collaborating with engineering, cybersecurity, data, architecture, and government stakeholders.

Build and maintain secure CI/CD pipelines for API and Kong gateway configuration across IRS environments. Manage infrastructure and platform configuration as code, automate OpenShift and cloud resources, embed security and validation checks, and automate onboarding tasks. Integrate pipelines with ServiceNow change control and CAB approvals, maintain backups and restore testing, and document processes for operations handoff.