Junior DevSecOps Engineer
About The Position
Peregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We work across the full lifecycle—from strategy and governance through architecture, engineering, analytics, AI, visualization, and training—for clients including the SEC, PCAOB, DDOT, and DCAA. Our clients describe our support as “absolutely excellent” and our people as “instrumental to organization’s success.” Winner of the United Nations COP27 Datathon, our work has earned all Exceptional CPARS ratings, SEC Chair’s Awards, the SEC Vision Award, and recognition from FDA leadership. We are also built differently. Peregrine is the first and only social enterprise organized as a Benefit Corporation and SBA 8(a) company focused on AI and data for government. We believe business success should create client value, social value, and opportunity for our people. As we enter our next stage of growth, we need dependable, motivated, and skilled people who have a combination of intellectual curiosity and intellectual courage. With new clients, larger programs, and expanding responsibilities, the people joining Peregrine now will have the opportunity to help shape the company we become. People first. Ownership always. We solve problems through people, process, and technology—in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation come before competence. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else. At Peregrine, you are not joining simply to fill a position. You are joining a team, taking ownership of a mission, and helping build a company. If that excites you, we should talk. At Peregrine Advisors, you will help build and operate the secure delivery pipelines that carry federal systems into production. But we hire people, not seats. As the work evolves, you will learn new systems and tools, take on greater responsibility, and help develop the firm's capabilities, tools, and lines of business. We move our best to where the hardest problems are.
Requirements
- 1+ years of software development, platform, or operations engineering experience
- A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
- Scripting ability (Python, Bash, or PowerShell)
- Working knowledge of continuous integration and continuous delivery (CI/CD) concepts, with hands-on experience in at least one pipeline tool
- Familiarity with cloud services on Amazon Web Services (AWS), and with Docker and containerization
- A basic understanding of container orchestration concepts
- Exposure to Infrastructure as Code (IaC) tools such as Terraform or CloudFormation
- Foundational experience with Linux operating systems
- Knowledge of computer networking concepts, application programming interfaces, load balancing, and web applications
- An understanding of cloud security principles and secure software delivery practices
- The ability to troubleshoot infrastructure and deployment-related issues
- Experience using artificial intelligence (AI)-assisted development tools such as GitHub Copilot for code generation and review
- Proficiency in writing, PowerPoint, and Excel
- United States citizenship
- Ability to obtain a Public Trust determination
Nice To Haves
- Exposure to Federal Information Security Modernization Act (FISMA) compliance, NIST SP 800-53 controls, or Authority to Operate (ATO) processes
- Vulnerability scanning or security tooling experience, such as static application security testing (SAST), dynamic application security testing (DAST), or policy-as-code
- Hands-on delivery of production workloads on Amazon Web Services (AWS), or an AWS certification
- Federal information technology experience
Responsibilities
- Build and maintain pipelines whose builds, tests, and deployments are routine rather than events.
- Add automated security testing, including static and dynamic application security testing and software composition analysis, to the delivery path.
- Set up monitoring and logging, and map controls to National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53).
- Chase down security and reliability findings, and fix them.
- Automate what the team does by hand, and build your part of the practice that puts security in early rather than bolting it on.
Benefits
- Medical, dental, and vision with the employee premium fully paid and half of dependent premiums
- Employer-paid life, accidental death, and short-term and long-term disability insurance
- A 401(k) matched 100% up to 4% of salary, vesting immediately
- Unlimited paid time off
- Sponsored professional certifications and continuing education
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
