DevSecOps Engineer (Kubernetes, CI/CD)

OpenDataJobs • Washington, DC

4d • $120,000 - $140,000 • Hybrid

About The Position

Peregrine Advisors is hiring a DevSecOps Engineer to stand up and operate secure delivery pipelines and cloud infrastructure supporting federal systems. The role is hybrid in the Washington, DC metropolitan area, with commuting cadence varying by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination. This is a full-time W-2 position.

The engineer will create and maintain secure, cloud-native infrastructure in AWS and the CI/CD pipelines used to deploy it. Work includes defining infrastructure as code with Terraform or CloudFormation; integrating security controls and testing into delivery workflows; supporting Docker and Kubernetes workloads; troubleshooting infrastructure, networking, deployment, and security issues; and automating provisioning and releases with health checks, rollback, and compliance evidence. The role also includes implementing NIST SP 800-53 controls and keeping authorization and continuous-monitoring evidence current.

The position uses Python and, where appropriate, Bash to automate operations and improve delivery quality. AI-assisted development tools may be used to generate, review, and validate code, with the engineer remaining accountable for the delivered work. Engineers may move across assignments as the firm’s work evolves.

Requirements

• At least 4 years of experience in DevSecOps or platform engineering.
• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline.
• Practical experience creating security-gated CI/CD pipelines using AWS-native tools such as CodeBuild and CodePipeline, or comparable tools such as GitLab CI or GitHub Actions.
• Experience standing up and operating Kubernetes clusters.
• Practical experience containerizing applications, creating Docker images, and using CloudFormation or Terraform for infrastructure as code.
• Experience with vulnerability scanning and automated security testing, including SAST, DAST, and SCA.
• Ability to program and script in Python; Bash is a plus.
• Proficiency with Linux operating systems and shell scripting.
• Strong knowledge of networking, including routing and load balancing, APIs, and web application architecture.
• Experience using Git to track and manage versions.
• Experience with logging and monitoring.
• Experience generating, reviewing, and validating code with AI-assisted development tools, such as GitHub Copilot.
• Proficiency in writing, PowerPoint, and Excel.
• Hands-on ownership of CI/CD pipelines, Docker containerization, infrastructure as code, and Kubernetes clusters used to deploy real systems in AWS or client-managed on-premises environments.
• Knowledge of pipeline security, including least-privilege design, secrets management, vulnerability scanning, and automated security testing.
• Judgment appropriate for environments that demand security and auditability.
• United States citizenship and ability to obtain a Public Trust determination for the initial engagement.

Nice To Haves

• Prior information technology work for the federal government.
• Experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or similar products.
• Federal security experience implementing NIST SP 800-53 controls, supporting Authority to Operate (ATO), and supporting FISMA compliance.
• AWS certification.

Responsibilities

• Create, maintain, and operate secure cloud-native infrastructure in AWS and its CI/CD delivery pipelines.
• Capture infrastructure as code using Terraform or CloudFormation.
• Build security into delivery pipelines with SAST, DAST, SCA, vulnerability scanning, and secrets management.
• Support Docker- and Kubernetes-based workloads and troubleshoot infrastructure, networking, deployment, and security faults.
• Automate operational work, provisioning, and releases, including health checks, rollback, and production of compliance evidence.
• Implement NIST SP 800-53 controls and maintain authorization and continuous-monitoring evidence.
• Use Python and Bash to automate work and improve the quality of delivered systems.
• Use AI-assisted tools to help implement, test, review, and improve owned components while validating their output.
• Build pipelines that enforce required controls and provide release reviewers with necessary evidence.
• Discuss a difficult problem worked through, the decisions made, the outcome, and lessons learned during the hiring process.

Benefits

• Medical, dental, and vision insurance, with the employee premium fully paid and half of dependent premiums paid.
• Employer-paid life, accidental death, short-term disability, and long-term disability insurance.
• 401(k) with employer match of up to 4% of salary.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.
• Extensive onboarding and development support across assignments and clients.
• Sponsored certifications, including DCAM and AWS technical certifications.
• Rotation across functions to expand skills and perspective.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level