DEVSECOPS & EVIDENCE-AUTOMATION ENGINEER

Zermount, Inc • Arlington, VA

1d • $145,000 - $175,000 • Remote

About The Position

We are looking for a highly talented, technical, hands-on DevSecOps & Evidence-Automation Engineer to help accelerate our growing Professional Services business within the Government Sector. This is a 100% remote position. You will build the CI/CD security pipeline and the automated evidence collectors that shift a federal continuous Authorization to Operate (cATO) program from periodic, manual evidence collection to near-real-time, machine-generated control evidence.

Requirements

• High level of attention to detail, needs minimal guidance, effective verbal and written communication.
• 7+ years building cloud-native, event-driven services and automation on AWS (serverless, Terraform/IaC, Docker).
• Strong in Go and/or Java (Spring Boot); Apache Kafka or equivalent event streaming.
• CI/CD pipeline engineering (Jenkins/GitHub Actions) and infrastructure-as-code.
• PKI/X.509 and secrets-management engineering (HashiCorp Vault, AWS Secrets Manager).
• Ability to map technical evidence to security controls (NIST SP 800-53).
• Ability to pass a minimum background investigation.

Nice To Haves

• SBOM generation and container signing a plus.
• Active Secret Clearance is preferred.

Responsibilities

• Build and operate a CI/CD pipeline (SAST, DAST, SCA, container scanning, SBOM, secrets) integrated across source, build, test, release, deploy, and runtime.
• Write evidence collectors (Python/boto3, serverless functions, Go) that pull cloud, scanner, and SIEM data and map it to security controls (NIST SP 800-53).
• Establish review gates and attestation formats for source-control governance.
• Build and maintain API/connector integrations and event-driven data flows feeding the evidence and GRC layer.
• Engineer identity, PKI, and secrets workflows (HashiCorp Vault, AWS Secrets Manager) supporting control evidence.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior