DevSecOps Engineer, AWS

OpenDataJobs • Washington, DC

20h • Hybrid

About The Position

Peregrine Advisors is a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission. This role involves owning a secure delivery path for federal systems, including continuous integration and delivery (CI/CD) pipelines with security gates, infrastructure-as-code for reproducible environments, and automation, monitoring, and evidence supporting Risk Management Framework (RMF) authorization and continuous monitoring. The work will be performed in Amazon Web Services (AWS) or in a client-managed, on-premises environment, and the built systems will be deployed into production. The firm hires people based on their potential and moves them to where the hardest problems are.

Requirements

• Sole United States citizenship.
• Ability to obtain a Public Trust determination.
• Hybrid role requiring regular commuting into Washington, DC.
• 4+ years of DevSecOps or platform engineering experience.
• Bachelor’s Degree in Computer Science or related field.
• Hands-on CI/CD pipeline automation with security gates, AWS-native (CodePipeline, CodeBuild) or comparable (GitHub Actions, GitLab CI).
• Infrastructure-as-code (CloudFormation or Terraform) and containerization.
• Automated security testing (SAST, DAST, SCA) and vulnerability scanning.
• Scripting in Python or Bash.
• Git-based version control.
• Monitoring and logging.
• Basic proficiency in writing, PowerPoint, and Excel.

Nice To Haves

• Federal security experience: supporting FISMA compliance, implementing NIST SP 800-53 controls, and Authority to Operate (ATO) support.
• Amazon Web Services certification.
• Kubernetes.
• Secrets management (HashiCorp Vault, AWS Secrets Manager, or comparable).
• Experience applying zero trust principles: identity-centered access, least privilege, and continuous verification.
• Software supply-chain integrity practice: software bills of materials (SBOMs) and artifact signing.
• Federal information technology experience.
• Familiarity with AI-assisted developer tooling.

Responsibilities

• Build CI/CD pipelines with automated security testing (SAST, DAST, SCA), policy-as-code checks, and controlled promotion.
• Develop infrastructure-as-code for reproducible environments with containerization and container-image scanning, least-privilege access, secrets management, and encryption.
• Implement operational fabric including monitoring, logging, vulnerability scanning, progressive delivery, low-downtime deployment strategies (blue/green, canary), automated health checks, rollback, incident response, pipeline reliability, software-delivery performance metrics, and evidence for Authority to Operate (ATO) and continuous monitoring.
• Contribute to the development of new capabilities, tools, and lines of business for the firm.

Benefits

• Medical, dental, and vision with the employee premium fully paid and half of dependent premiums.
• Employer-paid life, accidental death, and short-term and long-term disability insurance.
• A 401(k) matched 100% up to 4% of salary, vesting immediately.
• Unlimited paid time off.
• Sponsored professional certifications and continuing education.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level