DevSecOps Engineer (AWS, CI/CD)

OpenDataJobs • Washington, DC

3h • Hybrid

About The Position

Peregrine Advisors is seeking a DevSecOps Engineer to own a secure delivery path for federal systems. This role involves building continuous integration and delivery (CI/CD) pipelines with integrated security gates, infrastructure-as-code for reproducible environments, and automation for monitoring and evidence supporting Risk Management Framework (RMF) authorization. The work will be performed in Amazon Web Services (AWS) or client-managed, on-premises environments, and the developed solutions will be used to deploy real systems into production. The company emphasizes hiring individuals who thrive on owning hard problems and are equipped to deliver solutions, with opportunities for career growth based on performance and the ability to tackle challenging issues.

Requirements

• Sole United States citizenship and the ability to obtain a Public Trust determination.
• Hybrid role requiring regular commuting into Washington, DC.
• 4+ years of DevSecOps or platform engineering experience.
• Bachelor’s Degree in Computer Science or related field.
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI).
• Infrastructure-as-code (CloudFormation or Terraform) and containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• Basic proficiency in writing, PowerPoint, and Excel.

Nice To Haves

• Federal security experience: supporting FISMA compliance, implementing NIST SP 800-53 controls, and Authority to Operate (ATO) support.
• Amazon Web Services certification.
• Kubernetes.
• Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable).
• Experience applying zero trust principles: identity-centered access, least privilege, and continuous verification.
• Software supply-chain integrity practice: software bills of materials (SBOMs) and artifact signing.
• Federal information technology experience.
• Familiarity with AI-assisted developer tooling.

Responsibilities

• Own a secure delivery path for federal systems, including CI/CD pipelines with security gates.
• Implement infrastructure-as-code to create reproducible environments.
• Develop automation, monitoring, and evidence collection to support Risk Management Framework (RMF) authorization and continuous monitoring.
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, and controlled promotion.
• Implement infrastructure as code with containerization, least-privilege access, secrets management, and encryption.
• Establish the operational fabric including monitoring, logging, vulnerability scanning, progressive delivery strategies, and incident response.
• Develop and track pipeline reliability and software-delivery performance metrics.
• Generate evidence to support Authority to Operate (ATO) and continuous monitoring.
• Contribute to the development of new capabilities, tools, and lines of business within the firm.

Benefits

• Medical, dental, and vision with the employee premium fully paid and half of dependent premiums.
• Employer-paid life, accidental death, and short-term and long-term disability insurance.
• A 401(k) matched 100% up to 4% of salary, vesting immediately.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level