DevSecOps - CI/CD - IaC Engineer
About The Position
Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program. The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The DevSecOps - CI/CD - IaC Engineer will work as part of the CMM Data Modernization and Governance team responsible for delivering an integrated data governance, engineering, data platform, reporting, analytics, and Artificial Intelligence (AI)/Machine Learning (ML) capabilities that support operational decision-making and fulfill AO's data and analytics objectives in support of the CMM program. The successful candidate will be responsible for automating software delivery, deployment pipelines, infrastructure provisioning, configuration, security controls, and operational processes across CMM cloud data environments. The role integrates security throughout the software and infrastructure lifecycle and serves as a Senior Cloud Security Specialist, ensuring cloud platforms and data environments are securely designed, deployed, monitored, and operated.
Requirements
- Bachelor's degree in Computer Science, Software Engineering, or related field.
- 5+ years of experience in IT system engineering, systems development, systems coding and programming.
- Experience leading cloud migrations or major modernization initiatives.
- Strong knowledge of large‑scale infrastructure migration methods (IaaS/PaaS) and AWS cloud platforms.
- Deep understanding of cloud security, compliance, IAM, encryption, network security, and control frameworks.
- Strong scripting skills (Python, Bash, Ruby, Perl) for automation and tooling.
- Extensive experience building and supporting automated DevSecOps and CI/CD pipelines (Jenkins, GitLab, GitHub Actions, Azure DevOps).
- Solid background in Infrastructure as Code using Terraform, CloudFormation, or ARM/Bicep.
- Hands‑on experience with cloud APIs, cloud automation, and multi‑cloud/hybrid operations.
- Proficient with DevOps toolchains (Git, Jira, Confluence, Ansible, SonarQube, Fortify, Maven, Bamboo).
- Experience developing, testing, and maintaining containerized applications and Kubernetes-based workloads.
- Strong experience supporting full DevOps lifecycle (CI, testing, deployment, monitoring).
- Experience managing AWS private/public cloud deployments and automating cloud infrastructure provisioning.
- Capability to design, secure, and operate enterprise-scale CI/CD pipelines for diverse applications.
- Strong “security‑first” mindset and experience integrating SAST/DAST, dependency, and container scanning.
- Skilled in artifact management, release engineering, and build pipeline optimization.
- Ability to mentor teams on secure software delivery, DevSecOps practices, and IaC standards.
Nice To Haves
- Certified Data Management Professional (CDMP)
- Snowflake SnowPro Advanced
- Databricks Certified Data Professional
- AWS Certified Data Analytics - Specialty
- AWS Certified Solutions Architect - Professional
- AWS Certified Data Engineer
- Docker Certified Associate
- Certified Kubernetes Administrator
- Certified Professional DevSecOps Certification Course
- ITIL, AWS SysOps, Google Cloud DevOps Engineer
Responsibilities
- Deliver DevSecOps platform services that embed security, compliance, and monitoring across the full cloud and data product lifecycle.
- Integrate automated security controls, vulnerability management, policy compliance, and continuous monitoring into CI/CD and IaC workflows.
- Build, maintain, optimize CI/CD pipelines for automated build, test, security scanning, & deployment.
- Ensure all code and IaC changes are version‑controlled, peer‑reviewed, security‑scanned, and governed by change‑control gates.
- Automate cloud infrastructure provisioning and configuration using IaC tools (Terraform, CloudFormation, ARM/Bicep).
- Implement SAST/DAST, dependency, and container scanning within pipelines; maintain rollback procedures and deployment monitoring.
- Define and enforce cloud security architecture, IAM policies, secrets management, encryption, and network security controls.
- Conduct security reviews, threat modeling, and vulnerability assessments for pipelines and cloud infrastructure.
- Monitor environments for security events, misconfigurations, and compliance drift; lead remediation.
- Maintain artifact repositories, release automation, configuration management, and environment provisioning.
- Develop policy‑as‑code guardrails and automated compliance checks for IaC and CI/CD systems.
- Integrate and coordinate DevSecOps standards with AO teams to ensure enterprise interoperability.
- Provide documentation, training, and end‑user guidance for pipelines, tooling, and security practices.
- Review and update DevSecOps toolsets based on emerging threats and technologies; produce metrics reports (deployment frequency, MTTR, remediation times).
- Support incident response for security issues involving infrastructure, pipelines, or deployments.
- Collaborate with development, operations, governance, and security teams for unified visibility and secure delivery processes.
Benefits
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay
- Paid time off
- Full flex work week
- Variety of medical plan options
- Health Savings Accounts
- Dental plan options
- Vision plan
- 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match.
- Variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
- 15 days of paid leave per calendar year to be used for vacations, personal business, and illness
- 10 paid holidays per year
- Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees.
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
