DevSecOps Engineer

Please note: This role is contingent upon contract award. While it is not an immediate opening we are actively conducting interviews and extending offers in anticipation of the award.

The Work We are seeking a skilled and security-focused DevSecOps Engineer to support secure automated software delivery pipelines for a federal government program. The ideal candidate will have a strong background in software development automation security integration and infrastructure-as-code practices to ensure secure scalable and resilient cloud-native systems.

Job Location: Remote

What You Will Do:

• Configure and maintain cloud infrastructure resources withinAWS GovCloudandAzure supporting containerized and serverless architectures in amulti-environment deployment pipeline.

• Design and implementend-to-end automationfor infrastructure provisioning monitoring and deployment usingTerraformAnsible and other approved DevSecOps tools.

• Develop and maintaincustom automation scriptsand CI/CD workflows that reduce manual intervention and ensure consistent secure deployments.

• Deploy and manage workloads onAmazon ECS EKSLambda andAPI Gateway as well as Azure equivalents using container orchestration platforms likeRed Hat OpenShiftandKubernetes.

• Implement security best practices across the CI/CD lifecycle includingsecure secrets managementRBAC andZero Trust Architectureenforcement.

• Develop support and refineautomated test integration and release pipelines ensuring quality traceability and compliance with theClients modernization goals.

• Build delivery environments that meet DevSecOps standards forredundancyresilience andscalability followingAgileandEnterprise Performance Lifecycle (EPLC)methodologies.

• Integratesecurity tooling(e.g. SAST DAST vulnerability scanners container hardening tools) into CI/CD pipelines via APIs and plug-ins to ensure security controls are embedded from development through deployment.

• Support compliance with federal cybersecurity requirements includingNIST SP 800-53NIST SP 800-137FISMA andFedRAMP.

• Implement and maintain controls forcertificate managementencryptionkey management andsystem logging/monitoring in coordination with the Clients cybersecurity teams.

What You Will Bring With You:

• Bachelors Degree in Computer Science Information Systems Engineering or other related scientific or technical discipline

• 2 or more years of experience using AWS resources

• 2 or more years of experience working with Terraform and Ansible

• 1 or more years of experience working with automation tools such as Kubernetes

• US Citizenship or Green Card required due to federal contract requirements

• Must be able to obtain Public Trust clearance.

• MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.)

What We Would Like You To Bring With You:

• Certifications: AWS Certified DevOps Engineer Azure DevOps Expert Certified Kubernetes Administrator (CKA) CompTIA Security or CISSP.

• Masters degree

• Strong scripting/programming experience (Python Bash Go etc.).

• Proficiency with CI/CD tools like GitLab CI Jenkins GitHub Actions or CircleCI.

• Experience with container orchestration (e.g. Kubernetes ECS AKS).

• Experience supporting agile teams and using tools like Jira and Confluence.

• Familiarity with federal security standards such as FedRAMP FISMA and NIST SP 800-53.

• Familiarity with Zero Trust architecture and secure software development frameworks.

Professional Skills:

Working at ICF

Pay Range - There are multiple factors that are considered in determining final pay for a position including but not limited to relevant work experience skills certifications and competencies that align to the specified role geographic location education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is: