Senior DevSecOps Engineer - Reston, VA

Military Spouse Corporate Career Network • Reston, VA

5d • Onsite

About The Position

Noblis is seeking a highly experienced DevSecOps Engineer to support critical national security missions. The role embeds security practices throughout the DevOps lifecycle and integrates security at every stage of software development. The engineer collaborates with development, operations, and security teams to close gaps and promote shared accountability for security. The position calls for hands-on experience designing secure CI/CD pipelines, automating security controls, securing Kubernetes environments, and guiding or mentoring junior engineers. The role is on-site in Reston, Virginia.

Requirements

• U.S. citizenship.
• Active Top Secret/SCI clearance with Polygraph.
• Bachelor’s or master’s degree and 7 years of related experience; or associate degree and 11 years of related experience; or high school diploma/GED and 14 years of related experience.
• Proficiency in programming languages such as Python and scripting languages such as Bash for automation.
• Familiarity with CI/CD tools such as GitLab CI or GitHub Actions, container orchestration such as Kubernetes or EKS, and infrastructure-as-code tools such as Terraform or Ansible.
• Experience securing cloud environments, including AWS, Azure, or GCP, and understanding of cloud-native security tools and practices.
• Ability to identify security issues and vulnerabilities and develop effective solutions.
• Ability to translate technical complexities into actionable guidance for development teams.

Nice To Haves

• AWS certification, including AWS Certified DevOps Engineer or AWS Certified Solutions Architect.
• Experience with OPA/Gatekeeper or Kyverno.
• Knowledge of SBOM generation, artifact signing with cosign, and provenance concepts.
• Familiarity with NIST SP 800-171 or CMMC expectations.
• Strong analytical skills for diagnosing complex security issues spanning multiple technologies.

Responsibilities

• Design, build, maintain, and optimize CI/CD pipelines for automated build, test, security scanning, and deployment.
• Integrate automated testing, security scanning, and compliance validation into pipeline execution to support secure delivery.
• Develop and manage infrastructure as code using Terraform or CloudFormation, including security guardrails and scanning to ensure compliance and prevent misconfigurations.
• Implement security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code, and runtime security.
• Partner with teams to design and enforce AWS/Azure security guardrails, including least-privilege IAM, network controls, and encryption standards.
• Operationalize vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
• Translate security compliance requirements into automated security controls and audit-ready evidence.
• Ensure software development and deployment processes comply with applicable security policies, standards, and regulations.
• Act as a security champion and mentor junior engineers and developers on secure coding practices and DevSecOps principles.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior