DevSecOps Engineer - Sr

Nalley Consulting•Washington, DC

7d•Onsite

About The Position

Join the Nalley Consulting team as a DevSecOps Engineer. As a DevSecOps Engineer, you will design, build, harden, and operate CI/CD systems, cloud infrastructure, and container platforms that support the software lifecycle from code commit through production deployment. You will partner with multiple project teams to embed security controls, automate delivery workflows, and build scalable, resilient environments. The preferred candidate is a hands-on senior engineer who can bridge database engineering, API development, DevSecOps automation, and secure platform architecture. This person should be comfortable taking an initial concept, building an MVP, working directly with platform teams, and turning the solution into reusable templates and implementation patterns for multiple database technologies. The candidate will be responsible to design, tune, and maintain relational and NoSQL databases, including PostgreSQL, MySQL, Aurora, Oracle, MongoDB, and AWS RDS-based services. They will support database migration, backup, replication, disaster recovery, and point-in-time recovery activities. They will also support secure software delivery in accordance with DoD, IC, RMF, ICD-503, NIST SP 800-53, STIG, and continuous monitoring requirements.

Requirements

8+ years of experience in DevSecOps, DevOps, Cloud Engineering, or platform automation roles
Experience designing and maintaining CI/CD pipelines with GitLab CI or GitHub Actions
Experience deploying cloud infrastructure on AWS, Azure, or GCP using IaC, such as Terraform, CloudFormation, or CDK
Experience containerizing and orchestrating workloads using Docker or similar containerization and Kubernetes
Experience integrating automated security checks into CI/CD pipelines, such as SAST, SCA, or image scanning
Experience in Linux administration and proficiency in scripting languages, such as Python, Bash, or Go
Experience with Git‑based branching, tagging, and release workflows
Experience with networking fundamentals, such as DNS, routing, load balancing, or TLS
Cloud or DevOps Certifications, such as AWS Solutions Architect, CKA, CKAD
Security+ Certification
Active TS/SCI clearance; willingness to take a polygraph exam
Bachelor’s degree in a STEM field or equivalent work experience.

Nice To Haves

Experience with GitOps tooling, such as Flux, Argo CD, or Helmfile
Experience optimizing CI/CD pipelines, such as caching, artifacts, or parallelization
Experience implementing Zero Trust patterns, hardened container images, or compliance‑focused deployments such as STIG or CIS Benchmarks
Experience with AWS security services, such as GuardDuty, Macie, Inspector, or equivalent Azure or GCP tools
Experience with observability platforms such as Prometheus, Grafana, ELK, or CloudWatch
Experience with configuration management systems such as Ansible, Chef, or Puppet
Experience with AI augmented development workflows or agentic tools
Master’s degree in Physics, Computer Science, or a STEM field.

Responsibilities

Design, build, harden, and operate CI/CD systems, cloud infrastructure, and container platforms.
Support the software lifecycle from code commit through production deployment.
Partner with multiple project teams to embed security controls.
Automate delivery workflows.
Build scalable, resilient environments.
Design, tune, and maintain relational and NoSQL databases, including PostgreSQL, MySQL, Aurora, Oracle, MongoDB, and AWS RDS-based services.
Support database migration, backup, replication, disaster recovery, and point-in-time recovery activities.
Support secure software delivery in accordance with DoD, IC, RMF, ICD-503, NIST SP 800-53, STIG, and continuous monitoring requirements.