CI/CD Pipeline Engineer / DevSecOps Engineer

United StatesRemoteFull-timemid

CybersecurityDevSecOps Engineer

1 views0 saves0 applied

Apply Now

Quick Summary

Requirements Summary

Design, develop, configure, maintain, and optimize automated CI/CD pipelines for enterprise applications, microservices, software builds, automated testing

Technical Tools

CybersecurityDevSecOps Engineer

Join a mission-driven technology team focused on modernizing critical government systems and strengthening secure, reliable digital services. In this role, you will design, develop, and optimize automated CI/CD pipelines that accelerate software delivery while maintaining high standards of quality, security, and compliance. You will collaborate with software developers, cloud engineers, infrastructure specialists, and cybersecurity teams to integrate DevSecOps practices throughout the software development lifecycle. Your work will support cloud-native applications, Java microservices, containerized workloads, and enterprise platforms in environments with demanding security and availability requirements. This position offers the opportunity to improve automation, streamline releases, and contribute to systems that support important public-sector services. The role is fully remote within the United States, requires U.S. citizenship and a Public Trust clearance at the start, and does not involve travel.

CI/CD Pipeline Engineering: Design, develop, configure, maintain, and optimize automated CI/CD pipelines for enterprise applications, microservices, software builds, automated testing, and infrastructure workflows.
Build and Release Automation: Implement and improve build processes, unit and integration testing, code quality analysis, artifact publishing, and deployment workflows to increase release efficiency and reliability.
Reusable Automation Components: Develop reusable pipeline templates, shared libraries, deployment scripts, and automation tools that standardize software delivery across projects.
Pipeline Troubleshooting: Diagnose and resolve pipeline failures, build errors, deployment issues, and configuration inconsistencies to minimize development delays and operational risks.
DevSecOps Integration: Embed automated security testing into delivery workflows, including static application security testing (SAST), software composition analysis (SCA), container image scanning, and vulnerability assessments.
Security and Compliance Controls: Implement security gates, quality thresholds, and approval requirements while aligning pipeline configurations with applicable NIST SP 800-53, Risk Management Framework (RMF), and federal cybersecurity requirements.
Vulnerability Remediation and Audit Readiness: Support the resolution of security findings and maintain pipeline logs, deployment records, release approvals, and traceability documentation.
Cloud and Container Deployment: Support containerized applications using Docker and Kubernetes, including Amazon Elastic Kubernetes Service (EKS), and integrate pipelines with cloud services, container registries, and infrastructure automation.
Deployment Strategy and Reliability: Implement appropriate deployment approaches, including rolling deployments, blue-green releases, and rollback procedures, while collaborating with infrastructure teams to resolve environment, networking, access, and configuration issues.
Configuration and Version Management: Maintain source control workflows, branching strategies, versioning, artifact repositories, release tagging, and controlled promotion across development, test, staging, and production environments.
Monitoring and Continuous Improvement: Monitor pipeline performance, identify opportunities to reduce deployment time and manual intervention, and improve automation, reliability, consistency, and release quality.
Cross-Functional Collaboration: Work closely with development, cybersecurity, quality assurance, architecture, infrastructure, and operations teams to resolve technical and compliance challenges and meet program milestones.
Technical Guidance and Documentation: Advise developers on pipeline usage and DevSecOps best practices while maintaining technical standards, operational procedures, troubleshooting guides, and comprehensive documentation.

Requirements

~2 min read

Education and Overall Experience: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, together with at least 10 years of total professional experience in the field. The source specifies that additional experience cannot substitute for the degree requirement; equivalent relevant professional experience is also referenced in the qualification criteria.
CI/CD and DevOps Experience: At least three years of experience developing, maintaining, or supporting CI/CD pipelines and DevOps automation.
CI/CD Platforms: Demonstrated experience with one or more platforms such as Jenkins, Harness, GitLab CI/CD, or GitHub Actions.
Source Control: Practical experience with Git and established source control workflows.
Scripting and Automation: Proficiency in Python, Bash, PowerShell, or Groovy for scripting, pipeline automation, and deployment support.
Containers and Deployment: Experience with Docker, Kubernetes, container registries, and automated application deployment processes.
Software Delivery Fundamentals: Strong understanding of software builds, automated testing, version control, release management, and configuration management.
Security and Code Quality: Experience integrating code quality tools and automated security scanning into software delivery workflows, including vulnerability identification and remediation.
Troubleshooting and Communication: Strong analytical, problem-solving, documentation, and communication skills, with the ability to work effectively across technical teams.
Cloud and Infrastructure Automation: Experience with AWS services and Amazon EKS is preferred, as is familiarity with infrastructure-as-code tools such as Terraform or CloudFormation.
Pipeline Orchestration: Experience with Harness pipeline development, reusable templates, service and environment configuration, and deployment orchestration is an advantage.
Security and Monitoring Tools: Familiarity with SonarQube, Twistlock/Prisma Cloud, or comparable security and code quality tools, as well as observability platforms such as New Relic or CloudWatch, is preferred.
Application Architecture: Experience supporting Java applications, REST APIs, and microservice architectures is beneficial.
Federal IT and Compliance: Experience supporting federal government IT programs and working with NIST SP 800-53, FISMA, or the Risk Management Framework (RMF) is preferred.
Production Operations: Experience supporting production systems with stringent availability, auditability, security, and change-control requirements is an advantage.
Work Authorization and Clearance: U.S. citizenship is required, and candidates must be able to obtain or hold the required Public Trust clearance at the start of the assignment.
Work Arrangement: This is a fully remote position within the United States, with no travel required.
Certifications: No specific certification is required for this position.

What We Offer

~1 min read

✓Remote Flexibility: Fully remote work arrangement.

✓Mission-Driven Work: Opportunity to contribute to the modernization and security of critical government systems and digital services.

✓Professional Collaboration: Work alongside multidisciplinary teams across software engineering, cloud infrastructure, cybersecurity, and operations.

✓Technical Growth: Opportunities to deepen expertise in CI/CD automation, DevSecOps practices, cloud-native applications, container orchestration, and security-focused software delivery.