Sr. DevSecOps Engineer

Parsons Corporation•Aberdeen, MD

About The Position

Parsons is looking for an amazingly talented Sr. DevSecOps Engineer to join our team! As a Senior DevSecOps Engineer (Kubernetes/AWS), you will play a critical role in designing, implementing, and maintaining secure, scalable, and automated hybrid cloud infrastructure.

Requirements

Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field (or equivalent experience).
5-7 years of hands-on experience in DevSecOps, cloud infrastructure, or related roles.
Proven experience with on-premises Kubernetes, AWS, Terraform, Ansible, Helm, and GitLab CI/CD.
Strong scripting skills (e.g., Bash, Python, or similar).
Solid understanding of DevSecOps principles, CI/CD pipelines, and secure software development.
Excellent problem-solving, communication, and collaboration skills.

Nice To Haves

Familiarity with DoD cybersecurity frameworks (e.g., RMF, NIST, STIGs).
AWS certification (e.g., Solutions Architect, DevOps Engineer).
Familiarity with container security tools (e.g., Aqua, Twistlock).
Experience with monitoring and logging tools (e.g., Prometheus, Grafana, ELK).
Knowledge of containerization, infrastructure as code, and automation tools.

Responsibilities

Hybrid Cloud Infrastructure & Automation: Design, deploy, and manage on-premises Kubernetes clusters, ensuring high availability, scalability, and security.
Integrate and manage AWS cloud components as part of a hybrid infrastructure solution.
Develop and maintain Infrastructure as Code (IaC) using Terraform and Ansible for automated provisioning and configuration.
Package and deploy applications using Helm charts.
Automate infrastructure provisioning and configuration across both on-premises and AWS environments, integrating security best practices throughout.
CI/CD & DevSecOps: Build, maintain, and optimize secure CI/CD pipelines using GitLab.
Integrate security controls and compliance checks into the DevOps lifecycle.
Collaborate with development, security, and operations teams to ensure robust, secure, and efficient deployments.
Security & Compliance: Implement and enforce security best practices across hybrid cloud and containerized environments.
Support the Authority to Operate (ATO) process, working with cybersecurity teams to achieve and maintain compliance with DoD accreditation standards.
Collaboration & Documentation: Work closely with cross-functional teams to ensure alignment with architectural standards and customer requirements.
Document processes, configurations, and architectures for knowledge sharing and compliance.
Continuous Improvement: Drive adoption of DevSecOps tools, automation, and best practices across the enterprise.
Monitor, troubleshoot, and resolve issues related to infrastructure, deployments, and security.