Junior DevSecOps Engineer (CI/CD)

OpenDataJobs • Washington, DC

8h • $80,000 - $95,000 • Hybrid

About The Position

At Peregrine Advisors, you will help run the secure cloud infrastructure, continuous integration and continuous delivery (CI/CD) pipelines, and automation behind federal systems. As the work evolves, you will move to where the hardest problems are. Your first project will likely have you working alongside engineers on the pipelines a team relies on every day. You automate what the team does by hand, and you build your part of the practice that puts security in early rather than bolting it on. This is where you start, not the shape of your career here.

Requirements

• 1+ years of experience in software development, platform engineering, or operations engineering
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Scripting in Python, Bash, or PowerShell
• Working knowledge of CI/CD concepts and hands-on experience with at least one pipeline tool
• Familiarity with AWS cloud services, and with Docker and containerization
• A basic grasp of container orchestration concepts
• Exposure to infrastructure as code tools such as Terraform or CloudFormation
• Foundational Linux experience
• Knowledge of networking concepts, application programming interfaces, load balancing, and web applications
• An understanding of cloud security principles and secure software delivery practices
• The ability to troubleshoot issues in infrastructure and deployments
• Experience using AI-assisted development tools such as GitHub Copilot for code generation and review
• Proficiency in writing, PowerPoint, and Excel
• You treat security and reliability as part of the build, not a gate at the end, and you are highly motivated to develop as an engineer who automates what others do by hand and leaves an audit trail behind.
• You ask when you are stuck rather than guessing, you take feedback as the fastest route forward, and when priorities shift, you shift with them.
• You experiment, fail, learn, and repeat quickly.
• You would rather own an outcome than be handed a task.
• A foundation in scripting, Linux, networking, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.
• The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.
• The communication to say clearly what you have done, what you are stuck on, and what you need.
• The precision to work where accuracy and auditability are not optional.
• You adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own. You give the tools clear context, review and test their output, and remain accountable for the code you deliver.

Nice To Haves

• Exposure to NIST SP 800-53 controls, Federal Information Security Modernization Act (FISMA) compliance, or Authority to Operate (ATO) processes
• Experience with vulnerability scanning or security tooling, such as static application security testing (SAST), dynamic application security testing (DAST), or policy-as-code
• Hands-on delivery of production workloads on AWS, or an AWS certification
• Experience in federal information technology

Responsibilities

• Build and maintain pipelines and deployment automation, with senior engineers guiding you.
• Help write infrastructure as code in Terraform or CloudFormation.
• Add security scanning, vulnerability checks, and policy controls to the delivery pipeline.
• Help run Amazon Web Services (AWS) environments and Docker containers, including orchestration, monitoring, and logging.
• Help map and implement National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls, and automate the compliance evidence.
• Script repeatable operational tasks in Python, Bash, or PowerShell, and fix the findings that come back.
• Use artificial intelligence (AI)-assisted tools for scripting, testing, and pipeline work, and check everything they produce.
• Your work goes through code review, and you explain what you changed and why.
• Automate what the team does by hand, and build your part of the practice that puts security in early rather than bolting it on.

Benefits

• Medical, dental, and vision with the employee premium fully paid and half of dependent premiums
• Employer-paid life, accidental death, and short-term and long-term disability insurance
• A 401(k) matched 100% up to 4% of salary, vesting immediately
• Unlimited paid time off
• Sponsored professional certifications and continuing education

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level