DevSecOps Engineer (Secret Clearance)
About The Position
Join Deloitte’s Government & Public Services practice as a DevSecOps-focused Senior Consultant in Enterprise Security. You will help clients build, secure, and modernize software delivery environments by embedding security across the software development lifecycle. You will work with cloud, application, infrastructure, and platform teams to automate security controls, improve compliance, and strengthen resiliency in mission-driven environments. The role is available in Baltimore, Maryland; Rosslyn, Virginia; and Washington, District of Columbia. The candidate must be local to the DMV area and able to work onsite up to five days per week. Travel averages 20%, depending on the work and clients served. Candidates must be legally authorized to work in the United States without employer sponsorship and able to obtain and maintain the required clearance. The estimated salary range is $107,925 to $188,000. The role may also be eligible for a discretionary annual incentive, subject to the program rules and applicable factors.
Requirements
- Bachelor’s degree in computer science, cybersecurity, information technology, engineering, or mathematics.
- Local to the DMV area and able to work onsite up to five days a week.
- Ability to travel an average of 20%, based on the work and clients served.
- At least 4 years of experience implementing DevSecOps practices across cloud or hybrid environments.
- At least 4 years of experience building or administering CI/CD pipelines using Jenkins, GitLab CI, GitHub Actions, or Azure DevOps.
- At least 2 years of experience integrating application security testing, dependency scanning, secrets scanning, or container security controls into CI/CD pipelines.
- At least 3 years of experience with AWS, Microsoft Azure, or GCP, and infrastructure as code using Terraform, AWS CloudFormation, or Ansible.
- Must be legally authorized to work in the United States without employer sponsorship, now or in the future.
- Must be able to obtain and maintain the required clearance.
- Ability to work independently and collaboratively.
- Effective written and verbal communication skills.
- Meticulous attention to detail and quality of work product.
- Ability to build and sustain professional relationships.
- Ability to lead projects or workstreams.
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
- Strong interpersonal skills and professional demeanor.
- Ability to meet deadlines and provide clear guidance to others.
Nice To Haves
- Experience supporting federal, state, local, or higher education environments.
- Experience with NIST 800-53, the NIST Secure Software Development Framework, FedRAMP, or Zero Trust security requirements.
- Experience with Docker, Kubernetes, OpenShift, or container orchestration security practices.
- Experience using SonarQube, Snyk, Prisma Cloud, Aqua, or comparable security tooling.
- Experience developing automation using Python, PowerShell, Bash, or Go.
- Certifications such as CISSP, CCSP, AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate, or Certified Kubernetes Security Specialist (CKS).
Responsibilities
- Design and implement DevSecOps processes that integrate security controls into software development, build, release, and deployment workflows.
- Build and maintain CI/CD pipelines with automated security testing, code scanning, dependency scanning, and secrets detection.
- Support cloud and platform engineering teams with secure configuration, infrastructure as code, container security, and identity and access management practices.
- Collaborate with application developers, architects, and cyber teams to remediate vulnerabilities, improve secure coding practices, and strengthen release governance.
- Produce technical documentation, implementation artifacts, and status reports to support delivery, audit readiness, and client stakeholder decision-making.
Benefits
- Broad range of employee benefits.
- Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.
- Potential eligibility for a discretionary annual incentive program.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
