DevSecOps Engineer

Ascension Federal Services • Colorado Springs, CO

10d • Onsite

About The Position

We are seeking a skilled and motivated DevSecOps Engineer to join our team in Colorado Springs, CO. In this role, you will be responsible for integrating security practices within the DevOps process, ensuring the development, deployment, and maintenance of secure and reliable software systems.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience.
• 5+ years of experience in DevSecOps, DevOps, or related roles.
• Strong knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Experience with CI/CD tools like Jenkins, GitLab CI, CircleCI, or similar.
• Proficiency in scripting languages such as Python, Bash, or PowerShell.
• Hands-on experience with containerization and orchestration technologies (Docker, Kubernetes).
• Familiarity with security frameworks and compliance standards (e.g., NIST, CIS, ISO 27001).
• Experience with vulnerability management tools and static/dynamic application security testing (SAST/DAST).
• Strong problem-solving skills and ability to work collaboratively in a team environment.
• Excellent communication skills, both written and verbal.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines to automate software delivery and infrastructure changes.
• Collaborate with development, operations, and security teams to embed security best practices throughout the software development lifecycle.
• Conduct security assessments, vulnerability scanning, and threat modeling to identify and mitigate risks.
• Manage and monitor cloud infrastructure security, including configuration, access controls, and compliance.
• Develop and maintain infrastructure as code (IaC) using tools such as Terraform, CloudFormation, or similar.
• Implement and manage container security and orchestration platforms like Kubernetes and Docker.
• Automate security testing and compliance checks within the CI/CD pipeline.
• Respond to security incidents and support root cause analysis and remediation efforts.
• Stay current with emerging security threats, vulnerabilities, and industry best practices.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level