DevSecOps Engineer (AWS, CI/CD)

OpenDataJobs • Washington, DC

9h • Hybrid

About The Position

Peregrine Advisors is seeking a motivated DevSecOps Engineer to own a secure delivery path for federal systems. This role involves building and maintaining continuous integration and delivery (CI/CD) pipelines with integrated security gates, infrastructure-as-code for reproducible environments, and automation for evidence supporting Risk Management Framework (RMF) authorization and continuous monitoring. The work will be performed in Amazon Web Services (AWS) or client-managed, on-premises environments, and the solutions built will be deployed to production systems. The position offers the opportunity to contribute to real, impactful projects and grow within the firm.

Requirements

• Sole United States citizenship and ability to obtain a Public Trust determination.
• Hybrid role based in the Washington, DC metropolitan area, requiring regular commuting into DC.
• 4+ years of DevSecOps or platform engineering experience.
• Bachelor’s Degree in Computer Science or related field.
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI).
• Infrastructure-as-code (CloudFormation or Terraform) and containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• Basic proficiency in writing, PowerPoint, and Excel.

Nice To Haves

• Federal security experience: supporting FISMA compliance, implementing NIST SP 800-53 controls, and Authority to Operate (ATO) support.
• Amazon Web Services certification.
• Kubernetes.
• Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable).
• Experience applying zero trust principles: identity-centered access, least privilege, and continuous verification.
• Software supply-chain integrity practice: software bills of materials (SBOMs) and artifact signing.
• Federal information technology experience.
• Familiarity with AI-assisted developer tooling.

Responsibilities

• Own a secure delivery path for federal systems, including CI/CD pipelines with security gates.
• Implement infrastructure-as-code to create reproducible environments.
• Develop automation, monitoring, and evidence generation to support Risk Management Framework (RMF) authorization and continuous monitoring.
• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, and controlled promotion.
• Implement infrastructure as code for reproducible environments with containerization and container-image scanning, least-privilege access, secrets management, and encryption.
• Establish the operational fabric including monitoring, logging, vulnerability scanning, progressive delivery strategies, incident response, and pipeline reliability metrics.
• Develop new capabilities, tools, and lines of business for the firm.

Benefits

• Medical, dental, and vision with the employee premium fully paid and half of dependent premiums.
• Employer-paid life, accidental death, and short-term and long-term disability insurance.
• 401(k) matched 100% up to 4% of salary, vesting immediately.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level