Senior DevSecOps Engineer

Govcio LLC • Fairfax, VA

9d • Hybrid

About The Position

GovCIO is hiring a Senior DevSecOps Engineer to support its DEA Bluestone contract. The position is hybrid and located in either Arlington or Merrifield, Virginia. The engineer will build and operate secure delivery pipelines and platform tooling, provision workloads in AWS and Azure Government Cloud, manage container environments, and help expand service mesh and observability capabilities.

Requirements

• High school education and 10+ years of experience, or commensurate experience.
• 5–8 years of DevSecOps or engineering experience.
• Production experience with GitHub Actions or equivalent CI/CD, building reusable, multi-team pipelines.
• Strong Terraform skills and hands-on AWS experience; Kubernetes experience, with EKS preferred.
• Working knowledge of SAST, SCA, secret-scanning, and container-scanning tools and how to integrate them into a pipeline as blocking gates.
• Proficiency in at least one scripting or programming language: Python, Go, Bash, or PowerShell.
• Familiarity with NIST SP 800-53 and mapping technical controls to compliance evidence.
• Agile SDLC experience.
• Active Secret clearance and ability to attain DEA suitability.

Nice To Haves

• Azure Government Cloud experience alongside AWS.
• Administration experience with Istio, Rancher, Dynatrace, or Nexus IQ.
• Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
• Exposure to test automation and performance testing, such as LEAPWORK or JMeter.
• Certifications such as AWS Solutions Architect, AWS DevOps Engineer Professional, CKA, or Terraform Associate.

Responsibilities

• Design, author, and maintain CI/CD pipelines in GitHub Actions, including reusable workflows for application teams.
• Operate and integrate GitHub Enterprise, GitHub Advanced Security (CodeQL, Dependabot, and secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
• Build and maintain Terraform modules and infrastructure-as-code pipelines to provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
• Enforce Checkov scanning in the infrastructure-as-code pipeline and remediate policy violations in platform-owned code.
• Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.
• Operate containerized workloads on Amazon EKS and ECS Fargate, using Rancher for multi-cluster management.
• Advance Istio service mesh and the Kiali, Jaeger, and Dynatrace APM observability stack from pilot toward standardized, organization-wide use.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED