DevSecOps Engineer, Senior

Booz Allen Hamilton•Alexandria, VA

7d•$77,600 - $176,000

About The Position

Modern engineering teams rely on secure, automated delivery pipelines and cloud‑hosted DevSecOps platforms to move quickly without sacrificing security. As a DevSecOps Engineer, you will design, build, harden, and operate CI/CD systems, cloud infrastructure, and container platforms that enable rapid, reliable, and secure software delivery. You’ll work with engineering teams to automate everything from code commit to production deployment while embedding security controls directly into the delivery workflow. Your work will enable scalable, resilient cloud environments and frictionless DevSecOps capabilities across multiple programs and platforms.

Requirements

6+ years of experience in DevSecOps, DevOps, Cloud Engineering, or platform automation roles
Experience designing and maintaining CI/CD pipelines with GitLab CI or GitHub Actions
Experience deploying cloud infrastructure on AWS, Azure, or GCP using IaC, such as Terraform, CloudFormation, or CDK
Experience containerizing and orchestrating workloads using Docker and Kubernetes
Experience integrating automated security checks into CI/CD pipelines, such as SAST, SCA, or image scanning
Experience in Linux administration and proficiency in scripting languages, such as Python, Bash, or Go
Experience with Git‑based branching, tagging, and release workflows
Experience with networking fundamentals, such as DNS, routing, load balancing, or TLS
Active TS/SCI clearance; willingness to take a polygraph exam
Bachelor’s degree in a STEM field

Nice To Haves

Experience with GitOps tooling, such as Flux, Argo CD, or Helmfile
Experience optimizing CI/CD pipelines, such as caching, artifacts, or parallelization
Experience implementing Zero Trust patterns, hardened container images, or compliance‑focused deployments such as STIG or CIS Benchmarks
Experience with AWS security services, such as GuardDuty, Macie, or Inspector, or equivalent Azure or GCP tools
Experience with observability platforms such as Prometheus, Grafana, ELK, or CloudWatch
Experience with Ansible, Chef, Puppet, or similar configuration management systems
Experience with AI augmented development workflows or agentic tools
Master’s degree in Physics, Computer Science, or a STEM field
Cloud or DevOps Certifications, such as AWS Solutions Architect, CKA, CKAD, or Security+, or related Certification

Responsibilities

Build and secure CI/CD pipelines using GitLab CI/CD, GitHub Actions or similar platforms, integrating automated build, test, artifact management, and deployment stages.
Embed security automation into all pipeline stages, including SAST, SCA, container image scanning, IaC policy validation, and secrets management.
Engineer, deploy, and maintain cloud‑based DevSecOps toolchains on AWS, Azure, or GCP — including hosting CI/CD runners, registries, scanning tools, and orchestration components.
Develop and manage Infrastructure‑as‑Code (IaC) with Terraform, CloudFormation, or CDK to provision and secure cloud environments, networks, and services.
Operate containerized platforms using Docker, Kubernetes, Helm, and GitOps tooling to support automated, reproducible deployments.
Troubleshoot complex pipeline failures and performance bottlenecks, ensuring reliable and repeatable deployments across multiple environments.
Implement cloud security best practices, including IAM hardening, RBAC, network segmentation, TLS, reverse proxy designs, and hardened AMIs and images.
Support observability and platform reliability through logging, monitoring, alerting, and automated remediation.
Collaborate with developers, cloud engineers, and cybersecurity teams to evolve DevSecOps standards, architectural patterns, and secure deployment strategies.