DevSecOps Engineer

We are seeking a Senior DevSecOps Engineer to design, implement, and operate secure, scalable CI/CD pipelines supporting application delivery in AWS GovCloud environments. This role is responsible for building and managing GitLab-based DevSecOps automation, integrating security throughout the software development lifecycle, and enabling rapid, reliable, and compliant cloud deployments.

The ideal candidate combines deep CI/CD platform expertise with strong cloud, container, infrastructure-as-code, and application security experience. This position plays a key role in improving deployment velocity, strengthening security posture, and advancing DevSecOps maturity across engineering teams.

Position Responsibilities

·        Design, build, and maintain secure GitLab CI/CD pipelines to automate application delivery

·        Manage and optimize GitLab runners and CI/CD platform operations

·        Implement branching, release, and deployment strategies for reliable software promotion

·        Deploy and manage cloud infrastructure and services within AWS GovCloud

·        Automate infrastructure provisioning using Terraform and other Infrastructure as Code tools

·        Build, secure, and manage Docker containers and Kubernetes workloads (including EKS)

·        Maintain hardened container images and support GitOps-based deployments

·        Integrate security testing into CI/CD pipelines, including code scanning, dependency scanning, and container security checks

·        Automate security controls, compliance checks, and remediation processes

·        Develop automation and scripts using Python, Bash, or similar tools

·        Embed linting, unit testing, and performance testing into deployment workflows

·        Support development teams in adopting DevSecOps best practices through collaboration and technical guidance

·        Manage internal artifact repositories and container registries

Position Qualifications

Required Experience

• Proven experience designing and operating GitLab-based CI/CD platforms.
• Strong proficiency with Git and version control best practices.
• Hands-on experience with AWS cloud services and cloud-native architectures.
• Experience building and managing containerized environments using Docker and Kubernetes.
• Practical knowledge of DevSecOps principles and secure pipeline implementation.
• Experience writing and managing Infrastructure as Code using Terraform.
• Proficiency in scripting (Python, Bash) and working in Linux environments.

 Security & DevOps Knowledge

• Experience implementing SAST, DAST, IAST, and SCA tools within CI/CD workflows.
• Familiarity with container security, image hardening, and vulnerability management.
• Understanding of GitOps deployment models and modern release strategies.

Preferred Certifications (not required)

• GitLab Certification
• AWS Certification

_______________________________________________________