Lead DevSecOps Engineer

TechSur Solutions•Reston, VA

About The Position

We are seeking a highly skilled and motivated Senior DevSecOps Technical Lead to guide the technical direction of our DevSecOps and platform engineering initiatives. In this role, you will lead the design, implementation, and evolution of secure, scalable, and automated development platforms and cloud-native solutions that enable rapid and reliable software delivery. The ideal candidate is both a strong hands-on engineer and an experienced technical leader who can mentor team members, establish engineering standards, drive architectural decisions, and collaborate closely with customer stakeholders, developers, security teams, and operations personnel. This position requires deep expertise in DevSecOps, cloud infrastructure, CI/CD automation, platform engineering, and secure software delivery practices, along with the ability to lead technical execution across complex enterprise environments.

Requirements

Proven experience serving in a senior DevSecOps, platform engineering, site reliability engineering (SRE), or technical lead role.
Strong experience designing and implementing enterprise DevSecOps and CI/CD solutions in cloud-native environments.
Experience with Internal Developer Platforms (IDP), including Backstage and self-service developer enablement capabilities.
Strong experience with JavaScript/Node.js application build processes using npm and yarn.
Hands-on experience with containerization and orchestration technologies including Docker and Kubernetes.
Experience implementing Infrastructure-as-Code (IaC) solutions using Terraform, CloudFormation, or equivalent technologies.
Experience with modern CI/CD tooling such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or similar platforms.
Strong knowledge of cloud platforms including AWS, Azure, or Google Cloud Platform.
Experience implementing observability solutions including logging, monitoring, tracing, and alerting platforms.
Proficiency in scripting and automation using Python, PowerShell, Bash, or similar languages.
Strong understanding of DevSecOps principles, secure software development practices, and cloud security architectures.
Experience implementing security tools and practices including SAST, DAST, container scanning, dependency scanning, and secrets management.
Knowledge of federal security frameworks and compliance standards including NIST, CIS, RMF, and OWASP.
Excellent problem-solving, analytical, communication, and leadership skills.
Ability to mentor engineers and lead technical initiatives across distributed teams.
Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field.
Equivalent practical experience and demonstrated technical leadership will also be considered.

Nice To Haves

Experience supporting federal government or regulated enterprise environments.
Experience with GitOps workflows and tools such as ArgoCD or Flux.
Familiarity with service mesh technologies and zero trust architectures.
Experience with React, Java, and .NET application environments.
Relevant certifications such as: Certified Kubernetes Administrator (CKA), AWS/Azure/GCP cloud certifications, CISSP, Certified DevSecOps Engineer.

Responsibilities

Serve as the technical lead for DevSecOps and platform engineering initiatives across multiple projects and teams.
Lead the design and implementation of secure, scalable, and resilient cloud-native architectures and CI/CD platforms.
Establish engineering standards, reusable patterns, and best practices for infrastructure automation, security integration, and software delivery.
Drive architectural decisions related to cloud platforms, Kubernetes, infrastructure-as-code, observability, and deployment automation.
Evaluate emerging technologies and recommend tools and solutions that improve security, operational efficiency, and developer experience.
Provide technical leadership during planning sessions, design reviews, incident response activities, and production troubleshooting efforts.
Design, implement, and maintain Internal Developer Platform (IDP) capabilities using tools such as Backstage and modern platform engineering practices.
Develop and maintain secure CI/CD pipelines that integrate automated testing, vulnerability scanning, compliance validation, and deployment automation.
Automate infrastructure provisioning, configuration management, and application deployment using Infrastructure-as-Code (IaC) technologies.
Implement and maintain container orchestration platforms using Kubernetes and Docker.
Improve platform observability through centralized logging, monitoring, alerting, and performance analytics solutions.
Lead operational excellence initiatives focused on reliability, scalability, resiliency, and deployment velocity.
Integrate security controls and secure-by-design principles throughout the software development lifecycle (SDLC).
Conduct security assessments, vulnerability analysis, and remediation planning for infrastructure and applications.
Ensure compliance with applicable federal security standards and frameworks including NIST, CIS, and OWASP guidance.
Collaborate with cybersecurity teams to implement secure configurations, access controls, and incident response procedures.
Mentor and provide technical guidance to junior and mid-level engineers.
Conduct code reviews, architecture reviews, and technical design sessions to ensure quality and consistency.
Collaborate with software developers, architects, security engineers, and customer stakeholders to deliver mission-focused solutions.
Serve as a technical advisor and escalation point for complex engineering and operational issues.
Contribute to project planning, estimation, technical roadmaps, and continuous process improvement initiatives.
Develop and maintain technical documentation, platform standards, operational runbooks, and implementation guides.
Communicate technical concepts and recommendations effectively to both technical and non-technical stakeholders.