Top Remote DevSecOps Engineer Jobs

Maintain secure CI/CD pipelines, security scanning, Git workflows, cloud and CMS environments, infrastructure-as-code, and automated deployments across development through production. Troubleshoot build and deployment issues, optimize pipeline reliability, document standards, and collaborate with developers, cybersecurity teams, and system administrators in an Agile federal and DoD-aligned environment.

Designs and maintains secure AWS cloud infrastructure, Amazon EKS clusters, and GitLab CI/CD pipelines. Integrates vulnerability scanning, compliance controls, secrets management, and container security into DevSecOps workflows. Supports MLOps/AIOps platforms, AI model deployment, data pipelines, monitoring, and automation. Ensures FedRAMP, NIST, audit, and internal security compliance while collaborating across engineering teams.

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.

Designs, automates, secures, and maintains DevSecOps processes, CI/CD pipelines, cloud-native environments, containerized workloads, and deployment workflows. Integrates security testing, compliance checks, vulnerability management, incident response, secure configuration baselines, and cybersecurity tools throughout the SDLC. Maintains Git repositories, automation scripts, traceability, SBOM processes, and secure software delivery controls. Collaborates with developers, cloud engineers, architects, and government stakeholders while supporting audits, remediation, modernization, and VA security requirements.

Secure, harden, and scale AWS and Kubernetes production infrastructure. Build Terraform-based infrastructure as code, maintain Linux and Windows systems, improve IAM and CI/CD security, remediate vulnerabilities, support compliance audits, and administer security controls. The role also involves incident response, troubleshooting, documentation, operational runbooks, and collaboration with platform, engineering, and security teams supporting regulated and government environments.

Owns infrastructure, deployment automation, and security for a serverless AWS loan-servicing platform. Responsibilities include designing fault-tolerant infrastructure, building infrastructure-as-code frameworks, automating secure deployment pipelines and security controls, monitoring systems, troubleshooting performance issues, supporting DevOps tooling, and establishing auditable build and release standards. The role also requires cross-functional collaboration, mentoring, stakeholder education, and independently solving complex technical problems in a regulated financial-services environment.

Build and maintain AWS-based DevOps infrastructure, CI/CD pipelines, containerized microservices, and Infrastructure as Code. Improve observability, resilience, security, compliance, and scalability through monitoring, vulnerability management, system hardening, and performance testing. Collaborate with development teams to resolve outages, contribute to architecture and software development, review code, document systems, mentor engineers, and participate in Agile ceremonies and on-call support.

Secure internal systems and software development processes through least-privilege access, employee onboarding and offboarding, MDM oversight, technology reviews, vulnerability remediation, security automation, infrastructure as code, incident response, documentation, and security training. The role also participates in on-call support and helps develop scalable security controls across Linux-based infrastructure, AWS, and code.

Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.

Build, secure, and operate AWS infrastructure supporting AI services and federal applications. Deploy and manage production AI capabilities, cloud-native applications, infrastructure-as-code, CI/CD pipelines, containers, identity and access controls, secrets, monitoring, logging, and observability. Develop data pipelines using Python, SQL, and AWS services including S3, Glue, Lambda, and Step Functions. Establish reusable AI infrastructure patterns, support multiple application teams, troubleshoot issues, and meet security, privacy, and data-retention obligations.

Secure Virta’s cloud-native applications and platform by improving GCP and Kubernetes controls, integrating security into the software lifecycle, automating vulnerability detection and compliance, refining IAM and network security, developing security standards, supporting incident response, and promoting security awareness. The role requires hands-on application security, secure coding, vulnerability management, security testing, Terraform, and Go or Python development experience.

Design, build, secure, automate, and operate AWS cloud platforms supporting large-scale modernization. Develop CI/CD pipelines, Infrastructure as Code, containerized deployments, security scanning, secrets management, observability, release automation, and operational readiness capabilities. Troubleshoot distributed cloud environments, establish reusable platform patterns, and collaborate with engineering, architecture, security, vendors, and federal stakeholders to meet scalability, compliance, resilience, and governance requirements.

Build, deploy, and maintain a secure cloud-based IAM system using DevSecOps, Agile, CI/CD, and infrastructure-as-code practices. Responsibilities include automated testing, code reviews, production deployments, system tuning, monitoring, patching, certificate renewal, upgrades, configuration support, and troubleshooting. The role also supports high availability, compliance with federal security and accessibility requirements, data segregation, release management, and project risk and schedule activities.

Design, build, and maintain secure, cloud-native software and microservices on GCP. Develop APIs, deploy/manage GKE and Confidential Compute using IaC, implement CI/CD, configure monitoring/logging, collaborate on security (OWASP), and support analytics integration for SOCEUR HTAP mission.

Own cloud security engineering for an AWS-hosted SaaS platform processing sensitive healthcare data. Responsibilities include security monitoring, incident response, vulnerability management, IAM, infrastructure hardening, secure CI/CD integration, compliance support, data protection, audit evidence, and threat detection. The role partners with SRE and Software Engineering to embed security into architecture and development practices, while participating in security on-call rotations and occasional travel.

Design and harden Azure cloud architectures, embed security into CI/CD and infrastructure via DevSecOps, implement SAST/DAST and supply-chain controls, improve observability and SIEM integrations, remediate security debt, secure containers/Kubernetes, and build automation and developer-friendly guardrails to increase remediation velocity and operational resilience.

Lead integration of security into CI/CD and cloud infrastructure for DoD/FedRAMP systems. Design secure pipelines, automate IaC with compliance controls (STIGs, RMF), manage DevSecOps toolchains, harden Kubernetes/OpenShift, support ATO processes, and collaborate with ISSOs/assessors to maintain continuous monitoring and authorization.

Designs and improves cybersecurity solutions protecting AI infrastructure, cloud applications, data, and enterprise systems. Responsibilities include building AI-assisted development tools, implementing guardrails and security controls, monitoring logs, investigating and responding to incidents, identifying vulnerabilities, and advising internal teams and partners. The role requires advanced AWS, infrastructure-as-code, SDLC, CI/CD, scripting, and cybersecurity expertise, with experience in regulated environments preferred. Occasional travel and on-call availability are required.

Leads DevSecOps and platform operations across secure enterprise environments. Oversees CI/CD pipelines, release coordination, environment promotion, hosting alignment, security scanning, vulnerability management, monitoring, patching, incident response, and operational sustainment. Coordinates hosting, development, and infrastructure teams while managing DevSecOps personnel. The role also supports cloud environments and requires experience with data architecture, migration, API integration, secure federal systems, and practical AI applications.

Deploys and securely installs applications across a global government enterprise using DevSecOps and CI/CD practices. Responsibilities include pre-deployment testing, readiness reviews, containerized deployments, infrastructure automation, change management coordination, rollback and recovery procedures, configuration maintenance, SOP documentation, and deployment status reporting.

Enable and implement DevSecOps practices: design and maintain CI/CD pipelines, automate infrastructure, integrate security tools, support cloud container platforms, troubleshoot DevSecOps platforms, collaborate with product and cloud teams, and promote Agile/DevSecOps adoption across the organization.

Design, harden, and maintain secure, scalable AWS and Kubernetes infrastructure using Terraform. Harden hosts, manage Linux/Windows VMs and Active Directory, secure CI/CD, support vulnerability management, compliance/audits, incident response, runbooks, and operational troubleshooting for regulated and production environments.

Lead application security strategy and DevSecOps implementation across engineering teams. Own application security capabilities, including SAST, SCA, DAST, API security testing, vulnerability management, and CI/CD controls. Lead API security discovery, testing, onboarding, findings routing, and operational readiness. Partner with product, engineering, DevOps, infrastructure, IAM, and enterprise security teams to identify architectural weaknesses, improve SDLC adoption, automate abuse-case coverage, and operate hardened platforms.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Lead DevSecOps engineer responsible for IaC (Terraform), AWS provisioning and sizing, RDS maintenance, certificate lifecycle, security tooling and testing, monitoring integrations (New Relic, Splunk, Datadog), CI/CD pipelines (Jenkins/CBCore), dashboarding, incident response, and cross-account IAM/network configuration for healthcare-focused infrastructure.