Senior DevSecOps Engineer

Responsibilities: Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories. Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning. Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone. Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code. Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts. Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management. Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.

Qualifications: High School with 10 years (or commensurate experience)

Required Skills and Experience: 5–8 years DevSecOps/engineering experience. Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines. Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred). Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate. Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell). Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence. Agile SDLC experience. Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability Preferred Skills and Experience Azure Government Cloud experience alongside AWS. Istio, Rancher, Dynatrace, or Nexus IQ administration. Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts. Test automation and performance testing exposure (LEAPWORK, JMeter). Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate. Posted Salary Range: USD $130,000.00 - USD $170,000.00 /Yr.