DevSecOps Engineer

OpenDataJobs•Washington, DC

26d•Hybrid

About The Position

Peregrine Advisors is a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission. They are looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution. Your first assignment is to stand up the pipelines and secure infrastructure that carry a commercial off-the-shelf (COTS) financial stack into production for a federal agency, deploying CGI Momentum on Amazon Web Services (AWS) or in-environment with automation, monitoring, and security built in from the start. You will own continuous integration and delivery, infrastructure-as-code, and the controls that earn an Authority to Operate (ATO). The work is real, hard, and it matters. The firm hires people, not seats, and moves their best to where the hardest problems are.

Requirements

Treat security and reliability as part of the build, not a gate at the end.
Automate what others do by hand.
Leave an audit trail.
Experiment, fail, learn, and repeat quickly.
Own an outcome rather than be handed a task.
Hands-on CI/CD, infrastructure-as-code, and containerization for deploying real systems on AWS or in a federal environment.
Federal security craft: FISMA and NIST 800-53 controls, ATO support, and vulnerability scanning.
Judgment to build in a regulated environment where security and auditability are not optional.
U.S. citizenship.
Ability to obtain a Public Trust determination.

Responsibilities

Stand up pipelines and secure infrastructure for a COTS financial stack into production for a federal agency.
Deploy CGI Momentum on Amazon Web Services (AWS) or in-environment with automation, monitoring, and security.
Own continuous integration and delivery (CI/CD).
Own infrastructure-as-code.
Own the controls that earn an Authority to Operate (ATO).
Build continuous integration and delivery (CI/CD) pipelines and infrastructure-as-code that deploy the COTS stack (Momentum on AWS or in-environment) repeatably and securely.
Build the security fabric around it: containerization, monitoring and logging, vulnerability scanning, and the evidence that carries a system through its Authority to Operate (ATO).
In time, help build new capabilities, tools, and lines of business for the firm.