Senior DevSecOps Engineer - Reston, VA

VetJobs • Reston, VA

7d • $120,700 - $188,725 • Onsite

About The Position

Noblis is seeking a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions. The role embeds security practices throughout the DevOps lifecycle and works across development, operations, and security teams to address gaps and foster shared accountability for security. The successful candidate will have hands-on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and mentoring junior engineers.

The position is based in Reston, Virginia, and is on-site unless otherwise stated. The posted salary range is USD $120,700 to USD $188,725 per year.

Requirements

• U.S. citizenship.
• Active Top Secret/SCI clearance with Polygraph.
• Bachelor’s or master’s degree and 7 years of related experience; or associate’s degree and 11 years of related experience; or high school diploma/GED and 14 years of related experience.
• Proficiency in programming languages such as Python and scripting languages such as Bash for automation.
• Familiarity with CI/CD tools such as GitLab CI or GitHub Actions, container orchestration such as Kubernetes or EKS, and infrastructure-as-code tools such as Terraform or Ansible.
• Skills securing cloud environments, including experience with cloud service providers such as AWS, Azure, or GCP, and understanding of cloud-native security tools and practices.
• Ability to identify security issues and vulnerabilities and develop effective solutions.
• Ability to distill technical complexities into actionable guidance for development teams.

Nice To Haves

• AWS certification, including AWS Certified DevOps Engineer or AWS Certified Solutions Architect.
• Experience with OPA/Gatekeeper or Kyverno.
• Knowledge of SBOM generation, artifact signing with cosign, and provenance concepts.
• Familiarity with NIST SP 800-171 or CMMC expectations.
• Strong analytical skills for diagnosing complex security issues spanning multiple technologies.

Responsibilities

• Design, build, maintain, and optimize CI/CD pipelines for automated build, test, security scanning, and deployment.
• Integrate automated testing, security scanning, and compliance validation into pipeline execution.
• Develop and manage infrastructure as code using Terraform or CloudFormation, with security guardrails and scanning to support compliance and prevent misconfigurations.
• Implement security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
• Partner with teams to design and enforce AWS/Azure security guardrails, including least-privilege IAM, network controls, and encryption standards.
• Identify, prioritize, and remediate security threats across applications and infrastructure.
• Translate security compliance requirements into automated security controls and audit-ready evidence.
• Ensure software development and deployment processes comply with applicable security policies, standards, and regulations.
• Mentor junior engineers and developers on secure coding practices and DevSecOps principles.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior