DevSecOps/Security

OneGlobe•Washington, DC

About The Position

The Network/Cloud Engineer (DevSecOps/Security) evaluates cloud and hybrid hosting architectures, DevSecOps practices, infrastructure automation, cybersecurity controls, legacy technology risks, resilience, and modern architecture patterns. The role assesses environments against relevant federal security requirements and cloud policies, identifies technical and security gaps, and develops practical modernization and remediation recommendations. The position also supports technical documentation and assessment deliverables, including evidence-based findings, modernization narratives, architecture diagrams, pipeline visualizations, and security control mappings. Recommendations should be useful to both engineering teams and executive audiences.

Requirements

Bachelor's degree.
15+ years of infrastructure, cloud, and security engineering experience across hybrid cloud and on-premises environments.
Hands-on experience architecting and implementing solutions on AWS and/or Azure, including core compute, storage, networking, database, and security services.
Demonstrated expertise designing and implementing CI/CD pipelines, DevSecOps workflows, and automated deployment strategies.
Proficiency with Infrastructure-as-Code tools such as Terraform, CloudFormation, ARM templates, or Ansible, or similar tools.
Deep understanding of security control implementation across cloud and hybrid environments.
Experience assessing technical maturity, identifying gaps, and recommending practical modernization strategies.
Strong analytical skills and ability to evaluate complex technical environments and distill findings into actionable recommendations.
Ability to obtain DHS Entry on Duty (EOD) clearance.

Nice To Haves

FedRAMP authorization experience, including security assessment, continuous monitoring, and compliance documentation.
Familiarity with the NIST Risk Management Framework (RMF), Authority to Operate (ATO) processes, and federal security control baselines.
Knowledge of DHS cloud policies, Trusted Internet Connection (TIC) 3.0 requirements, and DHS Enterprise Architecture standards.
Experience implementing zero-trust architecture principles, including software-defined perimeter, micro-segmentation, and identity-centric security.
Hands-on experience with container orchestration platforms such as Kubernetes, Docker, ECS, or AKS.
Background with service mesh architectures such as Istio, Linkerd, or Consul and API gateway platforms such as Kong, Apigee, or AWS API Gateway.
Proficiency with observability and monitoring tools such as Prometheus, Grafana, Datadog, Splunk, or the ELK stack.
Experience with security automation tools, including SAST/DAST scanners, dependency scanning, and compliance-as-code platforms.
Cloud certifications such as AWS Solutions Architect, AWS DevOps Engineer, Azure Solutions Architect, Azure DevOps Engineer, or equivalent.
Security certifications such as CISSP, CCSP, or cloud security specialty certifications.
DevOps/DevSecOps certifications or demonstrable expertise.
Experience supporting federal IT modernization programs or cloud migration initiatives.
Background in Site Reliability Engineering (SRE) practices and chaos engineering principles.

Responsibilities

Evaluate AWS, Azure, and hybrid cloud hosting architectures, cloud-native design patterns, environment design, availability and disaster recovery strategies, and opportunities for cost optimization.
Assess alignment with FedRAMP requirements, cloud security best practices, and DHS cloud policies.
Review CI/CD pipelines, testing and deployment practices, artifact management, security integration, and DevSecOps maturity; identify bottlenecks and opportunities to improve delivery.
Evaluate Infrastructure-as-Code adoption, configuration management, provisioning automation, infrastructure testing, policy-as-code, and container orchestration practices.
Assess identity and access management, least privilege, MFA, privileged access and secrets management, centralized logging, SIEM, alerting, threat detection, incident response, vulnerability management, and compliance with relevant security controls.
Identify security and operational risks associated with legacy technologies and recommend remediation, migration, and interim mitigation strategies.
Assess performance monitoring, observability, auto-scaling, capacity planning, continuity, backup, failover, and disaster recovery practices; identify performance and scalability improvements.
Recommend and evaluate modern architecture enablers, including API gateways, service meshes, managed services, serverless computing, event-driven architectures, service discovery, distributed tracing, and asynchronous messaging.
Evaluate zero-trust practices, identity-based access, micro-segmentation, encryption, certificate and key management, federated identity, SSO, and ABAC.
Document hosting and technical environment findings; develop modernization narratives, architecture diagrams, pipeline visualizations, security control mappings, and assessment inputs; communicate recommendations to technical and executive audiences.