DevSecOps Engineer

LingaTech

Not Interested
Bookmark
Report This Job

profile Job Location:

Mechanicsburg, PA - USA

profile Monthly Salary: Not Disclosed
Posted on: 30+ days ago
Vacancies: 1 Vacancy

Job Summary

Location:Mechanicsburg PA
Position Type:Hybrid
Hybrid Schedule: 2 days onsite
Contract Length:9 months extensions

This role focuses on hands-on security automation in AWS delivering secure-by-default CDK constructs CloudFormation templates and CI/CD pipeline integrations with compliance checks mapped to CJIS and NIST standards. The position emphasizes preventive controls compliance-as-code and reusable security patterns that enterprise teams can adopt with Azure support considered for future phases.

Required Skills:

  • 5 years of AWS security automation and DevOps experience

  • Strong expertise with AWS CDK and CloudFormation; working proficiency in Terraform

  • Experience authoring CI/CD pipelines in GitHub Actions and Azure DevOps

  • Proficiency in Python and Bash with PowerShell for Windows automation

  • Ability to read Java and C# to integrate and tune SAST/SCA tools

  • Practical knowledge of CJIS and NIST 800-53 control families including automating checks and evidence generation

Preferred Skills:

  • Experience with EKS ECS and Lambda hardening patterns

  • Familiarity with tools such as OPA/Conftest Checkov Trivy Inspector or CodeQL

  • Basic Azure security automation knowledge for future phases

Duties:
  • Design author and maintain AWS CDK constructs and CloudFormation templates providing Terraform equivalents where required.

  • Implement AWS Config conformance packs Security Hub standards and GuardDuty routing in reference accounts.

  • Build and maintain CI/CD security templates in GitHub Actions and Azure DevOps with scanning gates for SAST SCA IaC containers and secrets.

  • Create reusable CI/CD templates with enforcement gates and exception workflows.

  • Develop compliance-as-code controls aligned with CJIS and NIST 800-53 including evidence exports and auditor-ready artifacts.

  • Harden CDK/CloudFormation modules and pipeline templates as compliance requirements evolve.

  • Coach pilot teams on adopting reference templates and patterns.

  • Raise compliance or enforcement gaps to enterprise teams for org-level action.


Required Experience:

Senior IC

Location:Mechanicsburg PAPosition Type:HybridHybrid Schedule: 2 days onsiteContract Length:9 months extensionsThis role focuses on hands-on security automation in AWS delivering secure-by-default CDK constructs CloudFormation templates and CI/CD pipeline integrations with compliance checks mapped t...
View more view more

Key Skills

  • ASP.NET
  • Health Education
  • Fashion Designing
  • Fiber
  • Investigation

About Company

Company Logo

Careers at LingaTech: Love Where You Work! Welcome to the vibrant world of LingaTech, where technology meets fun and innovation! Are you ready to join the adventure? As a premier employer of top-notch technology consultants, we're on a mission to assemble the most talented and passion ... View more

View Profile View Profile