Senior DevSecOps Engineer

Peraton•Chantilly, VA

21h•Onsite

About The Position

Join Peraton in advancing the safety, efficiency, and modernization of the National Airspace System (NAS) through the FAA’s Brand New Air Traffic Control System (BNATCS) contract. As a trusted partner to the Federal Aviation Administration, Peraton helps deliver the systems and services that keep our nation’s skies safe and connected. We’re looking for innovative professionals who thrive in mission-critical environments and are passionate about shaping the future of air traffic management. This is your chance to make an impact on one of the world’s most vital transportation infrastructures, working alongside leaders in aviation, engineering, data science, and systems integration. At Peraton, you won’t just support the mission — you’ll define it. Help shape the future of U.S. airspace safety and efficiency. We are seeking a Senior DevSecOps Engineer to help embed security, automation, and scalability into mission-critical systems supporting the Federal Aviation Administration (FAA). This position offers a unique opportunity to work at the intersection of cloud engineering, cybersecurity, and aviation modernization, helping deliver resilient systems that power the National Airspace System. Work Location: This position will work on site in the DC Metro area. Once operations are fully established, we will consider telework options however, this is not guaranteed. Your Impact: In this role, you will play a critical part in modernizing how software is built, secured, and deployed across FAA programs. You will design and implement automation frameworks, cloud-native infrastructure, and integrated security controls that enable teams to deliver systems faster while maintaining the highest standards of reliability and compliance.

Requirements

U.S. Citizenship Required.
Must have the ability to obtain / maintain a Public Trust clearance.
Bachelor’s degree and 8 years of experience or Associate’s degree and 10 years’ experience or HS diploma/equivalent and 12 years experience.
Strong proficiency with in DevOps, DevSecOps and CI/CD tools (Jenkins, GitLab CI/CD, Azure DevOps, or CircleCI).
Knowledge of scripting/programming languages (Python, Bash, PowerShell).
Hands-on experience with IaC tools (Terraform, Ansible, CloudFormation).
Knowledge of federal security standards (NIST RMF, FedRAMP, Zero Trust).
Familiarity with identity and access management (IAM), encryption, and key management services.
Knowledge of logging and monitoring platforms (Splunk, ELK Stack, Prometheus, Grafana).
Familiarity with API security and secure software development practices.

Nice To Haves

Experience supporting FAA programs or National Airspace System (NAS) environments.
Familiarity with aviation operations, air traffic management, or transportation systems.
Professional certifications such as CISSP, CCSP, AWS Certified DevOps Engineer, Kubernetes Security Specialist (CKS), or Microsoft DevOps Solutions Expert.
Experience with enterprise security platforms, vulnerability scanning tools, or SIEM systems.
Certifications such as AWS Certified DevOps Engineer, Kubernetes Administrator (CKA), Security+, or CISSP.
Experience with cloud environments (AWS, Azure, GCP) and associated security controls.
Hands-on experience with serverless architectures and microservices security.
Demonstrated success working in agile environments with cross-functional teams.
Background in AI/ML-driven DevSecOps practices or intelligent automation for compliance.

Responsibilities

Collaborate with developers, cybersecurity teams, and program stakeholders to build secure-by-design solutions that support FAA modernization initiatives.
Design, implement, and maintain CI/CD pipelines with integrated security controls.
Automate infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools.
Integrate security scanning and compliance validation into development workflows.
Collaborate with software engineers, architects, and cybersecurity specialists to ensure secure system design.
Support migration and deployment in cloud and hybrid environments (AWS, Azure, GCP).
Implement containerization and orchestration solutions (Docker, Kubernetes, OpenShift).
Conduct vulnerability scanning, remediation automation, and patch management.
Develop monitoring, logging, and alerting frameworks to ensure high availability and resilience.
Document DevSecOps practices, standards, and procedures, ensuring compliance with FAA and federal requirements.
Provide technical support and mentorship to development teams on DevSecOps practices.
Integrate security tools and processes into DevOps pipelines.
Implement automated testing for performance, security, and compliance.
Support audit readiness and compliance reporting through automation.
Conduct threat modeling and risk analysis for DevSecOps workflows.