DevSecOps Engineer

Credence•McLean, VA

8h•Remote

About The Position

At Credence, we support our clients’ mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, enterprise modernization, and advanced intelligence capabilities, to the largest defense and health federal organizations. Through partnership and trust, we increase mission success for war-fighters and secure our nation for a better future. We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that بأن focusing on the success of our clients, team members, and partners, we all achieve greater success. We have an immediate need for a mid-level DevSecOps Engineer to support the development, enhancement, and operation of scalable, application-focused CI/CD pipelines and automation frameworks for build, test, and deployment workflows in AWS GovCloud. This role supports a variety of modern applications, including backend services, frontend applications, and data pipelines, with a strong emphasis on pipeline engineering, Infrastructure as Code (Terraform), and cloud-native deployments. The position focuses on enabling reliable and scalable software delivery by building and optimizing CI/CD pipelines, infrastructure automation, and deployment workflows, while improving developer experience, release velocity, application quality, and system reliability across multi-stack environments.

Requirements

U.S. Citizenship with the ability to obtain and maintain a DoD Secret clearance
Security+ certification (or ability to obtain within 6 months of hire)
3-6 years of experience in DevOps, DevSecOps, or Platform Engineering, with a strong focus on CI/CD pipeline development for application delivery
Hands-on experience with Terraform for provisioning and managing infrastructure
Experience integrating automated testing (unit, integration, API) and security/quality checks (e.g., SAST, DAST) into CI/CD workflows
Experience working across multi-stack environments (backend, frontend, data pipelines)
Experience collaborating with engineering teams in Agile environments
Proficiency in scripting (Python, Bash, or similar)
Experience with CI/CD tools (GitLab CI/CD, Jenkins, AWS CodePipeline, or similar)
Working knowledge of AWS cloud-native architectures (e.g., Fargate, Lambda, API Gateway)
Familiarity with logging, monitoring, and observability practices in cloud environments
Familiarity with artifact management and versioning practices in CI/CD pipelines
Familiarity with implementing least-privilege access controls for CI/CD pipelines and cloud resources
Familiarity with federal compliance frameworks (NIST, RMF, FedRAMP)

Responsibilities

Build, enhance, and maintain CI/CD pipelines supporting backend, frontend, and data workflows
Implement and contribute to reusable pipeline templates for build, test, validation, and deployment
Support pipeline quality gates, including test coverage, code quality checks, and artifact versioning for promotion across environments
Assist in optimizing pipelines for speed, reliability, and traceability
Implement and manage cloud infrastructure using Terraform as the primary IaC tool
Contribute to and utilize reusable Terraform modules to standardize infrastructure
Support automated provisioning of infrastructure supporting application environments and CI/CD pipelines
Apply best practices supporting application delivery across backend, frontend, and data applications
Improve developer workflows by enabling efficient build, test, and deployment processes
Partner with engineering teams to improve test coverage, reliability, and maintainability
Improve overall release confidence, developer experience, and software quality
Build and optimize deployment pipelines for AWS-native services, including Fargate, Lambda, and API-driven architectures
Support implementation of scalable deployment strategies and environment consistency
Assist with versioning, artifact management, and release automation
Integrate security tools (e.g., SAST, SCA, container scanning) into CI/CD pipelines
Support policy-as-code and automated compliance validation
Contribute to aligning pipeline and infrastructure practices with NIST 800-53, STIG, and RMF requirements
Support implementation and maintenance of observability for applications, pipelines, and infrastructure
Assist with proactive monitoring and continuous improvement of system reliability