GovCIO is currently hiring for a Senior DevSecOps Engineer to support our DEA Bluestone contract This position is located in either Arlington or Merrifield, VA and is a hybrid position.
Responsibilities
- Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories.
- Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
- Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
- Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
- Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.
- Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
- Advance the service mesh and observability stack - Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM - from pilot toward standardized, org-wide use.
Qualifications
High School with 10+ years (or commensurate experience)
Required Skills and Experience
- 5–8 years DevSecOps/engineering experience.
- Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
- Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).
- Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
- Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).
- Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
- Agile SDLC experience.
Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability
Preferred Skills and Experience
- Azure Government Cloud experience alongside AWS.
- Istio, Rancher, Dynatrace, or Nexus IQ administration.
- Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
- Test automation and performance testing exposure (LEAPWORK, JMeter).
- Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate.
Posted Salary Range
USD $130,000.00 - USD $170,000.00 /Yr.
- Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories.
- Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
- Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
- Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
- Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.
- Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
- Advance the service mesh and observability stack - Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM - from pilot toward standardized, org-wide use.
High School with 10+ years (or commensurate experience)
Required Skills and Experience
- 5–8 years DevSecOps/engineering experience.
- Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
- Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).
- Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
- Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).
- Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
- Agile SDLC experience.
Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability
Preferred Skills and Experience
- Azure Government Cloud experience alongside AWS.
- Istio, Rancher, Dynatrace, or Nexus IQ administration.
- Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
- Test automation and performance testing exposure (LEAPWORK, JMeter).
- Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate.