Top Remote DevSecOps Engineer Jobs

Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.

Designs, automates, secures, and maintains DevSecOps processes, CI/CD pipelines, cloud-native environments, containerized workloads, and deployment workflows. Integrates security testing, compliance checks, vulnerability management, incident response, secure configuration baselines, and cybersecurity tools throughout the SDLC. Maintains Git repositories, automation scripts, traceability, SBOM processes, and secure software delivery controls. Collaborates with developers, cloud engineers, architects, and government stakeholders while supporting audits, remediation, modernization, and VA security requirements.

Secure, harden, and scale AWS and Kubernetes production infrastructure. Build Terraform-based infrastructure as code, maintain Linux and Windows systems, improve IAM and CI/CD security, remediate vulnerabilities, support compliance audits, and administer security controls. The role also involves incident response, troubleshooting, documentation, operational runbooks, and collaboration with platform, engineering, and security teams supporting regulated and government environments.

Build and operate secure CI/CD pipelines for AI/ML platforms in regulated and classified environments. Responsibilities include producing signed release packages and SBOMs, promoting software through controlled or air-gapped environments, integrating vulnerability management and compliance evidence, operating Kubernetes and AWS workloads, implementing observability, managing incidents, and maintaining deployment documentation. The role requires collaboration with security teams and support for RMF, accreditation, and continuous monitoring requirements.

Lead DevSecOps engineer on the Infrastructure and Platform Services team responsible for implementing and operating global SaaS infrastructure security. Duties include file integrity monitoring, automating audit evidence collection, hardening base images, securing containerized applications, release automation, incident response via on-call rotation, and collaborating with engineering and cybersecurity to meet compliance (FedRAMP, ISO, SOC) and remediation SLAs.

Designs and configures AWS and Salesforce environments, including accounts, VPCs, instances, networking, RDS, and test sandboxes. Integrates environments with GitHub and Jenkins CI/CD pipelines using Terraform, CloudFormation, and Ansible. Leads infrastructure requirements gathering, solution design, automation, testing, troubleshooting, documentation, and release-management alignment. Collaborates with application, cloud, infrastructure, security, QA, and federal stakeholders while maintaining VA governance and security standards.

Build backend services, APIs, data workflows, AI-enabled applications, coding agents, and secure DevSecOps pipelines for government and defense customers. Establish controlled AI development environments, automated quality and security testing, compliance evidence, software supply-chain protections, and Platform One-compatible deployment workflows. Modernize legacy applications and collaborate with software, platform, cybersecurity, and mission teams to transition R&D prototypes into secure operational capabilities.

Secure internal systems and software development processes through least-privilege access, employee onboarding and offboarding, MDM oversight, technology reviews, vulnerability remediation, security automation, infrastructure as code, incident response, documentation, and security training. The role also participates in on-call support and helps develop scalable security controls across Linux-based infrastructure, AWS, and code.

Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.

Build, secure, and operate AWS infrastructure supporting AI services and federal applications. Deploy and manage production AI capabilities, cloud-native applications, infrastructure-as-code, CI/CD pipelines, containers, identity and access controls, secrets, monitoring, logging, and observability. Develop data pipelines using Python, SQL, and AWS services including S3, Glue, Lambda, and Step Functions. Establish reusable AI infrastructure patterns, support multiple application teams, troubleshoot issues, and meet security, privacy, and data-retention obligations.

Secure Virta’s cloud-native applications and platform by improving GCP and Kubernetes controls, integrating security into the software lifecycle, automating vulnerability detection and compliance, refining IAM and network security, developing security standards, supporting incident response, and promoting security awareness. The role requires hands-on application security, secure coding, vulnerability management, security testing, Terraform, and Go or Python development experience.

Design, build, secure, automate, and operate AWS cloud platforms supporting large-scale modernization. Develop CI/CD pipelines, Infrastructure as Code, containerized deployments, security scanning, secrets management, observability, release automation, and operational readiness capabilities. Troubleshoot distributed cloud environments, establish reusable platform patterns, and collaborate with engineering, architecture, security, vendors, and federal stakeholders to meet scalability, compliance, resilience, and governance requirements.

Develops secure, fully automated cloud CI/CD pipelines and infrastructure using DevSecOps practices. Automates application, service, and infrastructure deployment; creates Ansible, Terraform, and Packer solutions; implements testing, monitoring, documentation, and immutable infrastructure. Collaborates with architecture, security, engineering, and quality teams on cloud adoption and compliance. Also supports endpoint defense, security monitoring, incident response, vulnerability remediation, access controls, security automation, and cyber defense improvements using Python and PowerShell.

Build, deploy, and maintain a secure cloud-based IAM system using DevSecOps, Agile, CI/CD, and infrastructure-as-code practices. Responsibilities include automated testing, code reviews, production deployments, system tuning, monitoring, patching, certificate renewal, upgrades, configuration support, and troubleshooting. The role also supports high availability, compliance with federal security and accessibility requirements, data segregation, release management, and project risk and schedule activities.

Design, build, and maintain secure, cloud-native software and microservices on GCP. Develop APIs, deploy/manage GKE and Confidential Compute using IaC, implement CI/CD, configure monitoring/logging, collaborate on security (OWASP), and support analytics integration for SOCEUR HTAP mission.

Own cloud security engineering for an AWS-hosted SaaS platform processing sensitive healthcare data. Responsibilities include security monitoring, incident response, vulnerability management, IAM, infrastructure hardening, secure CI/CD integration, compliance support, data protection, audit evidence, and threat detection. The role partners with SRE and Software Engineering to embed security into architecture and development practices, while participating in security on-call rotations and occasional travel.

Design and harden Azure cloud architectures, embed security into CI/CD and infrastructure via DevSecOps, implement SAST/DAST and supply-chain controls, improve observability and SIEM integrations, remediate security debt, secure containers/Kubernetes, and build automation and developer-friendly guardrails to increase remediation velocity and operational resilience.

Lead integration of security into CI/CD and cloud infrastructure for DoD/FedRAMP systems. Design secure pipelines, automate IaC with compliance controls (STIGs, RMF), manage DevSecOps toolchains, harden Kubernetes/OpenShift, support ATO processes, and collaborate with ISSOs/assessors to maintain continuous monitoring and authorization.

Designs and implements secure, fully automated cloud CI/CD pipelines and infrastructure-as-code. Collaborates with architecture, security, QA, and engineering teams to automate builds, tests, deployments, observability, and incident response. Develops Ansible, Terraform, Packer scripts, pipelines-as-code (YAML), and tools to improve reliability, security, and deployment velocity while ensuring compliance and documentation.

Enable and implement DevSecOps practices: design and maintain CI/CD pipelines, automate infrastructure, integrate security tools, support cloud container platforms, troubleshoot DevSecOps platforms, collaborate with product and cloud teams, and promote Agile/DevSecOps adoption across the organization.

Design, harden, and maintain secure, scalable AWS and Kubernetes infrastructure using Terraform. Harden hosts, manage Linux/Windows VMs and Active Directory, secure CI/CD, support vulnerability management, compliance/audits, incident response, runbooks, and operational troubleshooting for regulated and production environments.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Lead DevSecOps engineer responsible for IaC (Terraform), AWS provisioning and sizing, RDS maintenance, certificate lifecycle, security tooling and testing, monitoring integrations (New Relic, Splunk, Datadog), CI/CD pipelines (Jenkins/CBCore), dashboarding, incident response, and cross-account IAM/network configuration for healthcare-focused infrastructure.

Design, build, and operate secure Azure CI/CD pipelines and cloud infrastructure as code. Enforce policy-as-code, remediate security findings, manage identity and secrets, implement secure network architectures, and enable safe feature delivery while partnering with engineering teams to maintain delivery velocity.