Dev/Sec Ops Engineer

All Native Group • Washington, DC

1d • Hybrid

About The Position

All Native Group, a division of Ho Chunk, Incorporated, is seeking an exceptional Mid-Level DevSecOps Engineer to augment the Congressional Budget Office's (CBO) engineering team and mature its infrastructure automation, CI/CD pipeline, container orchestration, and security-hardened delivery practices. The engineer inherits established patterns and incrementally enhances capabilities within an active production, hybrid-cloud environment.

Requirements

• Strong Infrastructure-as-Code and Configuration-as-Code skills.
• CI/CD pipeline engineering with integrated security gates.
• Container hardening and orchestration proficiency.
• Familiarity with policy-as-code and secrets management.
• Collaborative, standards-driven engineering approach
• Minimum of 5 years of DevSecOps or infrastructure automation experience.
• Hands-on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
• Working experience with Docker, Kubernetes, Helm, and container security scanning (Trivy, Grype, or equivalent).
• Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and OPA/Rego.
• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Must be a U.S. citizen or permanent resident.
• Position requires a Public Trust Tier 2 clearance, obtained through a U.S. Capitol Police background check, prior to accessing the CBO network.

Nice To Haves

• Federal or highly regulated environment experience preferred.
• Certified Kubernetes Administrator (CKA) or HashiCorp Terraform Associate is preferred.

Responsibilities

• Maintain, extend, and refactor Terraform and OpenTofu codebases, including modular configurations, remote state, and backend management within approved change control.
• Develop and maintain Ansible playbooks and roles for configuration, compliance enforcement, patch management, and application deployment.
• Build and improve GitHub Actions workflows with security gates including SAST, dependency scanning, secrets detection, and policy-as-code validation.
• Support containerized delivery using Docker and Kubernetes, authoring hardened images, manifests, and Helm charts, with vulnerability scanning prior to deployment.
• Integrate Shift-Left security throughout the delivery lifecycle, enforcing CIS benchmarks and CBO baselines and supporting NIST SP 800-53 and FISMA compliance.
• Work within CBO's version control, change management, and peer review workflows; push no changes to production without following the change advisory process.
• Produce and maintain documentation, runbooks, and compliance artifacts to support audits and assessments.
• Participate in stand-ups, sprint planning, and technical reviews, and conduct knowledge transfer with CBO engineering staff.

Benefits

• All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level