Senior DevSecOps Engineer, Lead

Credence•Tysons, VA

1d•$170,000 - $200,000•Hybrid

About The Position

Credence has an immediate need for a highly skilled Senior DevSecOps Engineer to support federal programs hosted on AWS GovCloud. This hybrid role focuses on applying DevSecOps best practices, cloud automation, security compliance, and continuous integration/continuous deployment (CI/CD) to improve the security, scalability, and efficiency of mission-critical applications for federal clients.

Requirements

U.S. citizenship and the ability to obtain a successful DoD Secret security clearance.
Security+ certification.
At least 7 years of hands-on experience in DevSecOps, Cloud Engineering, or Infrastructure Automation roles.
Strong expertise in AWS GovCloud services, security configurations, and compliance frameworks.
Experience with CI/CD tools such as GitLab CI/CD, Jenkins, AWS Code Pipeline, or similar.
Hands-on experience with Infrastructure as Code using Terraform, CloudFormation, and Ansible.
Proficiency in Docker, Kubernetes, EKS, ECS, and Fargate.
Strong understanding of AWS security services, including IAM, GuardDuty, Security Hub, KMS, WAF, Config, and Secrets Manager.
Knowledge of federal cybersecurity frameworks and practices, including RMF, NIST 800-171/53, STIGs, and Zero Trust.
Experience implementing automated security testing, including SAST, DAST, vulnerability scanning, and SBOM management.
Proficiency in Python, Bash, or PowerShell scripting for automation and security enforcement.

Responsibilities

Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments for DoD and civilian agency applications.
Build and optimize CI/CD pipelines using tools such as GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform to automate deployments and security compliance.
Ensure adherence to federal cybersecurity frameworks, including NIST 800-171, NIST 800-53, RMF, FedRAMP, and Zero Trust; implement STIGs, security baselines, and automated SAST/DAST scanning.
Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible.
Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, using services such as Amazon EKS, ECS, and Fargate.
Implement monitoring, logging, incident response, and compliance reporting using tools such as AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK.
Develop automation scripts using Python, Bash, or PowerShell to improve deployment efficiency and security enforcement.
Collaborate with software developers, cybersecurity teams, and cloud engineers to integrate security and automation into the software development lifecycle.