Senior DevSecOps Engineer

Peraton•,

1d•$135,000 - $216,000•Remote

About The Position

Peraton is seeking a Senior DevSecOps Engineer to serve as the technical lead for DevSecOps and cloud transformation across a large AWS enterprise environment spanning both commercial and GovCloud. This role will help modernize software delivery by building secure, automated, and repeatable development and deployment processes with security built in from the start.

Requirements

Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance.
Bachelor's degree with 12 years of experience, a Master's degree with 10 years of experience, or a High School Diploma or equivalent and 16 years.
8+ years of AWS experience covering networking, IT security tooling, and databases.
Hands-on technical expertise in DevSecOps, security automation, application development, integration, and release management.
Real-world experience establishing and maturing CI/CD toward progressive delivery.
Experience building self-service developer onboarding or platform-as-a-product capabilities using Terraform and GitLab.
Proven track record in senior technical or advisory roles, driving strategic change and digital adoption across business units.
Experience supporting FedRAMP, FISMA, or DoD-accredited cloud environments.
Leadership presence and communication skills to work with customers at all levels and manage communication during critical incidents.

Nice To Haves

AWS Certified Solutions Architect — Professional.
AWS Certified Security — Specialty.
Red Hat Certified Specialist in OpenShift Administration.
Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).
HashiCorp Certified: Terraform Associate; experience obtaining or maintaining an ATO in a FedRAMP High environment.

Responsibilities

Design and manage GitLab CI/CD pipelines using reusable templates, shared runners, feature flags, environment gates, and DORA metrics.
Automate SAST, DAST, SCA, and secrets scanning as required pipeline stages, with policy-based gates that prevent insecure builds from promotion.
Integrate container scanning, registry admission controls, and runtime protection using Aqua Security to enforce Kubernetes and CIS benchmarks.
Scan Terraform and Kubernetes configurations for security issues and remediate findings before deployment.
Lead Jenkins-to-GitLab CI/CD migrations and establish standardized pipeline patterns for application teams.
Operate containerized workloads on OpenShift (ROSA) and Amazon EKS across AWS Commercial and GovCloud, including Spring Boot and other microservices.
Automate AWS and Kubernetes infrastructure with Terraform and use Ansible/Ansible Tower for configuration management, hardening, and patching.
Engineer AWS services including EC2, VPC, IAM, S3, EBS, ELB/ALB/NLB, Route 53, and CloudWatch, using least-privilege IAM as the baseline.
Implement GitOps workflows so infrastructure, application, and cluster configurations are version-controlled, reviewable, and reproducible.
Build reusable Terraform modules and GitLab templates that allow application teams to provision namespaces, environments, and supporting AWS resources without platform-team tickets.
Design self-service onboarding workflows covering repository creation, CI/CD setup, RBAC and quotas, and security-gate enrollment.
Publish standardized GitLab pipeline templates and golden-path patterns so security, compliance, and observability are built in automatically.
Maintain onboarding documentation and module catalogs, and use adoption and onboarding metrics to identify and remove friction.
Implement and enforce STIG, CIS, and organizational security requirements across pipelines, platforms, and workloads.
Design and manage AWS and Kubernetes IAM, including RBAC, admission controls, pod security, network policies, and secrets management using AWS KMS and Secrets Manager.
Support vulnerability management, ATO and accreditation activities, audits, and continuous compliance reporting across FedRAMP and DoD environments.
Operate observability platforms including Datadog, Dynatrace, Splunk, OpenTelemetry, CloudWatch, and OpenSearch for metrics, logs, traces, dashboards, and alerting.
Lead critical incident response, including real-time diagnostics, stakeholder and executive communication, root-cause analysis, and corrective actions through resolution.
Facilitate cross-team root-cause reviews and drive resulting reliability improvements through implementation.
Lead transformation initiatives across AI, advanced analytics, and emerging technologies, translating strategy into actionable engineering roadmaps and technical responses to RFIs.
Establish engineering standards, review architecture, and mentor engineers across DevSecOps, cloud, security, and automation.
Identify and improve inefficient processes and actively participate in Agile delivery to evolve business processes and technology.