Sr. DevSecOps Engineer

Role Overview: The Sec Dev Ops Engineer owns the development and management of secure, compliant cloud infrastructures across multiple cloud providers, enhancing automation, security, and observability to ensure robust federal cloud operations and continuous compliance with security standards such as FedRAMP and NIST 800-53.

Key Responsibilities: Support and operate Zero Trust Network Access (ZTNA) architectures, including app connectors, privileged remote access, and private application boundaries, utilizing tools like Zscaler ZPA / PRA.Manage privileged credentials, API tokens, and secret lifecycle workflows using Hashi Corp Vault, establishing automated credential rotation and lifecycle management. Integrate federated identity providers (Okta, Azure AD / Entra ID, AWS IAM Identity Center) and support multi-cloud identity migrations. Enforce strict least-privilege access policies across cloud environments, automating role-based access controls and credential rotations. Build, automate, and maintain multi-tenant cloud infrastructure across AWS, Azure, and Google Cloud Platform (GCP) using Infrastructure as Code (Terraform as primary, Ansible, Cloud Formation).Automate cloud provisioning, configuration management, and application deployment through secure CI/CD pipelines and Git Ops processes (ArgoCD, Helm).Configure and manage cloud networking, security groups, IAM roles, and network permissions aligning with FedRAMP IL4 controls. Develop and uphold secure CI/CD pipelines using tools such as Git Hub Actions, Git Lab CI, Azure Dev Ops, or Jenkins, integrating Policy-as-Code frameworks (OPA, Hashi Corp Sentinel, Azure Policy).Embed static application security testing (SAST), software composition analysis (SCA), and container vulnerability scanning into deployment workflows. Build, deploy, and troubleshoot containerized workloads in Kubernetes environments (EKS, AKS, GKE) using Helm, ArgoCD, or Kustomize. Support FedRAMP continuous monitoring (Con Mon), incident management, POA&M tracking, and remediation activities. Automate audit evidence collection and compliance reporting for controls like CM-2, CM-6, AU-2, SC-12.Participate in enterprise change management processes, including documentation and technical review cycles via tools such as Service Now. Maintain centralized observability infrastructure using Grafana, Prometheus, Cloud Watch, and other cloud-native tooling. Define, monitor, and report on SLIs/SLOs for critical cloud security services. Lead incident response efforts, on-call troubleshooting, root cause analysis, and rapid resolution for security and operational issues.

Core Qualifications & Requirements: 3–5 years of professional experience in Sec Dev Ops, Cloud Security Engineering, Platform Engineering, or Dev Ops. Hands-on experience with at least one major hyperscaler (preferably AWS); working knowledge of Azure and GCP.Advanced skills in Infrastructure as Code (Terraform, Ansible, Cloud Formation) and scripting languages (Python, Bash, Power Shell).Proven experience managing enterprise identity/access solutions (Okta, Entra ID) and secrets management platforms (Hashi Corp Vault, AWS KMS, Azure Key Vault).Familiarity with security tooling such as endpoint protection (EDR), CSPM (Cloud Security Posture Management), and vulnerability scanners (Crowd Strike, Wiz, Qualys).Strong understanding of containerization and orchestration platforms (Docker, Kubernetes).Practical knowledge of FedRAMP, NIST 800-53, SOC 2 frameworks, or comparable compliance standards.

Qualifications: Certifications such as Hashi Corp Certified: Terraform Associate, AWS Certified Sys Ops Administrator, Solutions Architect, or Security+.Experience with additional cloud tools and automation frameworks. Familiarity with enterprise change management and incident response processes in government or highly regulated environments.

Core Technical Skills: Cloud Platforms: AWS, Azure, GCPInfrastructure as Code: Terraform, Cloud Formation, Ansible

Scripting Languages: Python, Bash, Power Shell Identity & Secrets Management: Hashi Corp Vault, Okta, Entra ID, AWS IAM, Azure ADSecurity & Compliance Tools: Wiz, Qualys, Crowd Strike, OPA, Hashi Corp Sentinel Containerization & Orchestration: Docker, Kubernetes, Helm, ArgoCDMonitoring & Observability: Grafana, Prometheus, Cloud Watch, Pager Duty, Service NowCI/CD & Policy Frameworks: Git Hub Actions, Git Lab CI, Azure Dev Ops, Jenkins, Azure Policy, OPADue to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process and ability to pass a government background investigation.