DevSecOps Engineer (Entry level - Clearance Required) - (US-Remote)

ICF • Reston, VA

2d • Remote

About The Position

We are seeking an DevSecOps Engineer to support a federal client by helping integrate security practices into modern cloud and application development workflows. You will work alongside senior DevOps, security, and application teams to support CI/CD pipelines, cloud infrastructure, and automated security controls in alignment with federal standards. Job Location: This is a fully remote role which may require occasional travel to the DC Metro area as needed for onsite client meetings.

Requirements

• Must possess an active high level security clearance (TS).
• 2+ years of experience in DevOps, cloud engineering, systems engineering, or cybersecurity.
• MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.), as this work is for a federal contract and laws do apply.
• US Citizenship required due to a federal contract requirements.

Nice To Haves

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field
• Basic understanding of CI/CD concepts and DevOps practices
• Familiarity with at least one cloud platform (AWS, Azure, or GCP)
• Working knowledge of Linux and basic scripting (Bash, Python, or similar)
• Exposure to DevSecOps tools (e.g., SonarQube, Snyk, Trivy, Checkov, Aqua, Prisma Cloud)
• Experience with Docker and basic Kubernetes concepts
• Familiarity with NIST 800-53, FedRAMP, or other federal security standards
• Entry-level certifications such as AWS Cloud Practitioner, Azure Fundamentals, Security+, or similar
• Experience supporting applications in a regulated or government environment

Responsibilities

• Assist in the development, maintenance, and monitoring of CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
• Support infrastructure as code (IaC) efforts using tools like Terraform, CloudFormation, or ARM templates
• Help integrate security scanning and compliance checks into build and deployment pipelines (SAST, DAST, dependency scanning, container scanning)
• Support cloud infrastructure in AWS, Azure, or GCP, with an emphasis on security best practices
• Assist with containerization efforts using Docker and orchestration platforms such as Kubernetes
• Monitor environments, logs, and alerts; assist with troubleshooting and incident response
• Document configurations, processes, and security controls to support audits and compliance requirements
• Collaborate with development, operations, and security teams in an Agile/Scrum environment
• Learn and apply federal security frameworks such as NIST, FISMA, and FedRAMP

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Number of Employees: 1,001-5,000 employees