Mid-Level DevSecOps Engineer
Job Location:
Washington, DC - USA
Monthly Salary:
Posted on:
Vacancies:
Job Summary
Key Personnel Requirements
The Consultant shall provide a DevSecOps Engineer who meets the following specific requirements:
Required Technical Skills
Infrastructure as Code: Hands-on experience with Terraform and OpenTofu including module development remote state management and workspace management
Configuration as Code: Proficiency with Ansible including playbook and role development dynamic inventories and Ansible Vault for secrets management
CI/CD: Demonstrated experience designing and maintaining GitHub Actions workflows including reusable workflows matrix builds and security gate integration
Containers: Working knowledge of Docker image authoring and hardening Kubernetes manifest and Helm chart management and container security scanning tools (e.g. Trivy Grype or equivalent)
Security Integration: Familiarity with SAST tools (e.g. Semgrep Checkov tfsec) secrets scanning (e.g. Gitleaks Detect-Secrets) and policy-as-code frameworks (e.g. OPA/Rego)
Version Control: Proficiency with Git-based workflows including branching strategies pull request reviews and protected branch enforcement
Preferred Skills
Experience in a federal or highly regulated environment
Familiarity with NIST SP 800-53 FISMA and FedRAMP compliance requirements
Cloud platform experience (AWS)
Experience with secrets management tools (e.g. HashiCorp Vault)
Scripting proficiency in Python and Bash
