Senior DevOps CI/CD Engineer – AWS (DevSecOps Champion)

Description

The company supports the DOJ Homeland Security Task Force and National Coordination Center, and this is a senior technical role that leads secure CI/CD and DevSecOps for AWS-based systems.

You will design and oversee pipelines and automation that build security, compliance and risk management into delivery for mission-critical systems.

Responsibilities

• Set and enforce secure CI/CD and DevSecOps standards, patterns and guardrails for AWS-hosted applications, following the company's cyber security policy, handbook and cloud security standards.
• Design, build and maintain CI/CD pipelines on platforms such as AWS CodePipeline and CodeBuild, Jenkins, GitLab CI, GitHub Actions or Azure DevOps, with security scanning, compliance checks, approvals and testing built in.
• Lead infrastructure-as-code work in CloudFormation and Terraform, with security and configuration baselines embedded to provision AWS environments securely.
• Automate secure provisioning, configuration and deployment across development, test and production AWS accounts in line with cyber and IT risk requirements.
• Set up monitoring, logging and alerting with CloudWatch, CloudTrail and central logging so pipelines are secure, observable and auditable.
• Add identity and access management, encryption, secrets management, vulnerability scanning and compliance controls into CI/CD workflows.
• Make sure pipelines and AWS solutions meet contractual and regulatory requirements such as NIST 800-53 and 800-171, CMMC, FedRAMP and ISO 27001, plus internal cyber standards.
• Work with application development, cloud platform, cyber security, IT risk and operations teams so architectures are ready for DevSecOps and follow secure development standards.
• Lead and coach project teams adopting DevSecOps and secure CI/CD, document practices, and build reusable secure pipeline templates and patterns.
• Contribute to proposals, technical reviews and risk assessments that involve secure CI/CD, cloud security or DevSecOps, including input to labor category mapping and staffing.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cyber Security or a related field, or equivalent experience.
• Typically 8+ years of relevant IT experience, including significant DevOps, DevSecOps and CI/CD work on production systems.
• Hands-on experience with AWS services such as EC2, ECS, EKS, S3, IAM, VPC, CloudWatch and CloudTrail in security-sensitive or regulated environments.
• Proven experience designing and running CI/CD pipelines on one or more modern platforms, such as AWS CodePipeline and CodeBuild, Jenkins, GitLab CI, GitHub Actions or Azure DevOps.
• Strong experience with infrastructure-as-code, such as CloudFormation or Terraform, and with secure configuration management and automation.
• Demonstrated experience moving signed builds into an air-gapped, classified or otherwise network-isolated environment, including artifact transfer procedures and post-deployment verification.
• Experience with containers and orchestration, such as Docker, ECS, EKS or Kubernetes, including security concerns like image scanning, runtime security and least privilege.
• Demonstrated experience adding security testing, vulnerability scanning and compliance checks to CI/CD workflows.
• Experience working under formal security and risk frameworks, such as NIST 800-53 and 800-171, CMMC, FedRAMP, ISO 27001 or customer-specific cyber requirements.
• Strong communication and collaboration skills, with the ability to work across cyber, risk, engineering and program management teams.
• Preferred, not required: AWS certifications such as AWS Certified DevOps Engineer Professional, AWS Certified Security Specialty or AWS Solutions Architect.
• Preferred, not required: security or DevSecOps certifications.
• Preferred, not required: experience supporting or implementing secure cloud architectures.
• Preferred, not required: experience in enterprise DevSecOps or security transformation work, or in a cloud or cyber center of excellence.
• Preferred, not required: experience with multi-account AWS Organizations, landing zones and centralized security and governance services.

Conditions

Full-time, 40 scheduled hours per week, regular position based in Fairfax, Virginia, USA.

Hybrid work model, with travel required 50-75% of the time.

Secret clearance must be held now or obtainable; US citizenship is required.

Candidates must complete an identity verification process using biometrics and AI, and must be on camera for virtual interviews.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• 401(k) with pre-tax and post-tax contributions up to IRS limits and a company match.
• Full flex work weeks where possible, and paid time off including vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Short-term and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• Likely salary range of $144,500 to $195,500, with final pay set by experience, location and possibly contract terms, and possibly outside this range.