DevSecOps Engineer (Kubernetes, CI/CD)

OpenDataJobs • Washington, DC

4d • Hybrid

About The Position

Peregrine Advisors is hiring a DevSecOps Engineer to stand up and operate delivery pipelines and cloud infrastructure for federal systems, ensuring that deployments are secure and automated. The role is based in the Washington, DC metropolitan area under a hybrid work arrangement; commuting cadence varies by assignment. The initial engagement requires U.S. citizenship and the ability to obtain a Public Trust determination.

Responsibilities may include creating and maintaining secure, cloud-native infrastructure in AWS and CI/CD pipelines that deploy to it; capturing infrastructure as code with Terraform or CloudFormation; and supporting Docker- and Kubernetes-based workloads. The engineer builds security into delivery with SAST, DAST, SCA, vulnerability scanning, and secrets management; troubleshoots infrastructure, networking, deployment, and security faults; and automates operational tasks, provisioning, and releases with health checks, rollback, and compliance evidence.

The role also includes implementing NIST SP 800-53 controls and maintaining authorization and continuous monitoring evidence. Python and, where appropriate, Bash are used to automate work. The engineer uses AI-assisted tools to implement, review, test, and improve code while remaining accountable for delivered work. Pipelines are expected to enforce required controls and provide evidence for release review, with progressive delivery and automated health checks and rollback.

This is a full-time W-2 position with a salary of $120,000 to $140,000 per year. The company describes the position as evolving across assignments and clients, with opportunities to work alongside developers, engineers, data scientists, architects, and strategists and to expand skills through onboarding, certifications, and function rotations.

Requirements

• At least 4 years of experience in DevSecOps or platform engineering.
• Bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline.
• Practical experience creating security-gated CI/CD pipelines using AWS-native tools such as CodeBuild and CodePipeline, or comparable tools such as GitLab CI or GitHub Actions.
• Background standing up Kubernetes clusters and operating them.
• Practical experience containerizing applications, creating Docker images, and using infrastructure as code with CloudFormation or Terraform.
• Experience with vulnerability scanning and automated security testing such as SAST, DAST, and SCA.
• Ability to program and script in Python; Bash is a plus.
• Proficiency with Linux operating systems and shell scripting.
• Strong knowledge of networking, including routing and load balancing, APIs, and web application architecture.
• Experience using Git to track and manage versions.
• Background in logging and monitoring.
• Experience generating, reviewing, and validating code with AI-assisted development tools, such as GitHub Copilot.
• Proficiency in writing, PowerPoint, and Excel.
• U.S. citizenship and ability to obtain a Public Trust determination for the initial engagement.

Nice To Haves

• Prior information technology work for the federal government.
• Experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or similar products.
• Federal security experience implementing NIST SP 800-53 controls, supporting Authority to Operate (ATO), and supporting FISMA compliance.
• AWS certification.

Responsibilities

• Create and maintain secure, cloud-native infrastructure in AWS and CI/CD pipelines used to deploy to it.
• Represent infrastructure as code using Terraform or CloudFormation.
• Build security controls into delivery pipelines, including SAST, DAST, SCA, vulnerability scanning, and secrets management.
• Support Docker- and Kubernetes-based workloads and troubleshoot infrastructure, networking, deployment, and security faults.
• Automate repeatable operational work, provisioning, and releases, including health checks, rollback, and compliance evidence.
• Implement NIST SP 800-53 controls and maintain authorization and continuous monitoring evidence.
• Use Python and Bash to automate work and improve delivered systems.
• Use AI-assisted tools to generate, review, test, and improve code while remaining accountable for the results.
• Ensure pipelines enforce required controls and provide release reviewers with supporting evidence.
• Develop progressive delivery practices that make deployments reliable and minimize manual release steps.

Benefits

• Medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums covered.
• Employer-paid life, accidental death, short-term disability, and long-term disability insurance.
• 401(k) with an employer match of up to 4% of salary.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.
• Extensive onboarding and opportunities for rotation across functions to expand skills and perspective.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level