DevSecOps Engineer

OpenDataJobs • Washington, DC

5d • Hybrid

About The Position

Peregrine Advisors is seeking a motivated DevSecOps Engineer to join their team. This role involves owning the secure delivery path for federal systems, including building CI/CD pipelines with integrated security, creating reproducible infrastructure-as-code, and implementing automation, monitoring, and evidence generation to support Risk Management Framework (RMF) authorization and continuous monitoring. The work will be performed in Amazon Web Services (AWS) or client-managed, on-premises environments, and the solutions built will be used for real systems in production. Peregrine Advisors is a data and technology innovation hub and a Benefit Corporation focused on federal government missions.

Requirements

• Sole United States citizenship.
• Ability to obtain a Public Trust determination.
• Hands-on CI/CD (AWS-native or comparable) experience.
• Infrastructure-as-code experience.
• Containerization experience.
• Experience deploying systems in AWS or client-managed, on-premises environments.
• Experience with automated security testing (SAST, DAST, SCA).
• Experience with vulnerability scanning.
• Experience with secrets management.
• Experience with least-privilege design.
• Scripting in Python or Bash beyond pipeline configuration.
• Judgment to build where security and auditability are not optional.
• 4+ years of DevSecOps or platform engineering experience.
• Bachelor’s Degree in Computer Science or related field.
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI).
• Infrastructure-as-code (CloudFormation or Terraform) and containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• Basic proficiency in writing, PowerPoint, and Excel.

Nice To Haves

• Federal security experience: supporting FISMA compliance, implementing NIST SP 800-53 controls, and Authority to Operate (ATO) support.
• Amazon Web Services certification.
• Kubernetes experience.
• Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable).
• Experience applying zero trust principles: identity-centered access, least privilege, and continuous verification.
• Software supply-chain integrity practice: software bills of materials (SBOMs) and artifact signing.
• Federal information technology experience.
• Familiarity with AI-assisted developer tooling.

Responsibilities

• Own a secure delivery path for federal systems.
• Develop continuous integration and delivery (CI/CD) pipelines with security gates.
• Implement infrastructure-as-code for reproducible environments.
• Automate, monitor, and generate evidence to support Risk Management Framework (RMF) authorization and continuous monitoring.
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, and controlled promotion.
• Develop reproducible environments with containerization and container-image scanning, least-privilege access, secrets management, and encryption.
• Implement monitoring, logging, and vulnerability scanning.
• Utilize progressive delivery and low-downtime deployment strategies (e.g., blue/green, canary deployments) with automated health checks and rollback.
• Manage incident response.
• Track pipeline reliability and software-delivery performance metrics.
• Generate evidence supporting Authority to Operate (ATO) and continuous monitoring.
• Contribute to the development of new capabilities, tools, and lines of business for the firm.

Benefits

• Medical, dental, and vision with the employee premium fully paid and half of dependent premiums.
• Employer-paid life, accidental death, and short-term and long-term disability insurance.
• 401(k) matched 100% up to 4% of salary, vesting immediately.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level