Senior DevSecOps Engineer, Lead

Credence•Tysons, VA

1d•Hybrid

About The Position

Credence is hiring a senior-level DevSecOps Engineer to support federal programs hosted on AWS GovCloud. This hybrid role focuses on applying DevSecOps best practices, cloud automation, security compliance, and CI/CD to improve the security, scalability, and efficiency of mission-critical applications for defense and civilian agencies. The engineer will design and maintain secure, compliant AWS GovCloud environments; develop deployment pipelines and infrastructure automation; implement security controls and monitoring; and collaborate with software developers, cybersecurity teams, and cloud engineers to integrate security and automation throughout the software development lifecycle.

Requirements

U.S. citizenship and ability to obtain a successful DoD Secret security clearance.
Security+ certification.
At least 7 years of hands-on experience in DevSecOps, cloud engineering, or infrastructure automation roles.
Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
Experience with CI/CD tools such as GitLab CI/CD, Jenkins, AWS CodePipeline, or similar tools.
Hands-on experience with infrastructure as code using Terraform, CloudFormation, and Ansible.
Proficiency in Docker and container orchestration technologies, including Kubernetes, EKS, ECS, and Fargate.
Strong understanding of AWS security services, including IAM, GuardDuty, Security Hub, KMS, WAF, Config, and Secrets Manager.
Knowledge of federal cybersecurity frameworks and controls, including RMF, NIST 800-171/53, STIGs, and Zero Trust.
Experience implementing automated security testing, including SAST, DAST, vulnerability scanning, and SBOM management.
Proficiency in Python, Bash, or PowerShell scripting for automation and security enforcement.

Responsibilities

Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments for DoD and civilian agency applications.
Build and optimize CI/CD pipelines using tools such as GitLab CI/CD, Jenkins, AWS CodePipeline, and Terraform to automate deployments and security compliance.
Ensure adherence to federal cybersecurity frameworks, including NIST 800-171, NIST 800-53, RMF, FedRAMP, and Zero Trust; implement STIGs, security baselines, and automated SAST/DAST scanning.
Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible.
Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud using services such as Amazon EKS, ECS, and Fargate.
Implement monitoring, logging, incident response support, and compliance reporting using tools such as AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK.
Develop automation scripts in Python, Bash, or PowerShell to improve deployment efficiency and security enforcement.
Work with software developers, cybersecurity teams, and cloud engineers to integrate security and automation into the software development lifecycle.