DevSecOps Engineer (Remote)

Oxley Enterprises • Stafford, VA

22h • Remote

About The Position

Build the secure delivery engine of a mission-critical Department of Veterans Affairs (VA) cloud platform. As a DevSecOps Engineer, you will design and maintain secure, automated Continuous Integration/Continuous Delivery (CI/CD) pipelines integrating security scanning and compliance controls across thousands of pipelines supporting hundreds of applications on Amazon Web Services (AWS) GovCloud. The DevSecOps Engineer designs, implements, and maintains secure CI/CD pipelines integrating automated testing and security scanning into all build and release workflows.

Requirements

• 1 year of experience in DevSecOps engineering
• Excellent experience designing, implementing, and maintaining secure CI/CD pipelines (e.g., environment segregation across sandbox, staging, and production)
• Excellent ability to integrate automated unit, integration, regression, performance, and security testing into all build and release workflows
• Excellent experience implementing automated container image builds, tagging, signing, and vulnerability scanning
• Excellent knowledge of Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and container scanning integration into pipelines
• Excellent ability to implement and maintain Infrastructure as Code (IaC) using Terraform
• Working knowledge of Kubernetes-based deployments and automated scaling in an Elastic Kubernetes Service (EKS) environment
• Experience supporting a federal agency
• Excellent verbal and written communication skills
• Active Federal Civilian Public Trust clearance
• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years

Nice To Haves

• AWS Certified DevOps Engineer - Associate

Responsibilities

• Designs, implements, documents, and maintains secure CI/CD pipelines aligned with approved design patterns supporting all assigned applications
• Integrates automated unit, integration, regression, performance, and security testing into all build and release pipelines
• Implements automated container image builds, tagging, signing, and vulnerability scanning
• Ensures pipeline promotion enforces environment segregation
• Integrates SAST, DAST, SCA, container scanning, and IaC scanning into pipelines
• Ensures vulnerabilities are identified and remediated within defined timelines
• Implements and maintains IaC for clusters, networking, identity, platform services, and cloud resources
• Supports automated environment provisioning, scaling, and teardown
• Collaborates with Product teams, Site Reliability Engineers (SREs), and Security teams to implement blue/green, canary, or rolling deployment strategies
• Validates system readiness prior to production deployments
• Validates post-deployment production testing to ensure capabilities and services are not degraded or disrupted following each release
• Maintains version control, artifact repositories, and build traceability across all environments supporting auditability of all builds and configuration changes
• Participates in Program Increment (PI) Planning, architecture reviews, and change management activities
• Evaluates and implements improvements to automation and deployment efficiency

Benefits

• Medical, dental, vision and prescription drug coverage for you and your family.
• Life Insurance, short-term disability and long-term disability paid for by the Company.
• Supplemental coverages including Accident, Critical Illness, and Hospital.
• Additional Life insurance coverage for you and your dependents.
• 401k plan with various options to select based on your retirement goals.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level