Title: Sr. IT DevSecOps Engineer
Client: U.S. Federal Government (Public Sector)
Period of Performance: February 2, 2026 December 31, 2026 (potential extension to 2027)
Video interview
Position Summary
The Sr. IT DevSecOps Engineer will build GitLab based DevSecOps automated pipelines into AWS GovCloud, support and accelerate application delivery on the CI/CD platform, and manage and operate GitLab CI/CD environments.
Certifications
GitLab certification desired but not required
AWS certification desired but not required
Knowledge, Skills, and Experience
Version Control Systems
Proficiency with Git
Advanced knowledge of GitLab, including CI/CD pipelines, merge requests, and issue tracking
Familiarity with branching, promotion, and release strategies (such as SemRel)
Familiarity using internalized registries and repositories (Nexus dependency management, internal container registries, etc.)
CI/CD
GitLab CI/CD
GitLab runners (configuration and management)
GitLab components (or generally developing and utilizing templates for CI/CD jobs in any platform, such as GitHub Actions)
Cloud Platforms
Demonstrated proficiency with AWS (Lambda, EC2, S3, EBS/EFS, ECS, EKS, SNS, CloudWatch)
Containerization
Docker (building, deploying, and managing containers)
Kubernetes (orchestration, deployment strategies, security, troubleshooting)
Container security best practices
Container hardening strategies, such as maintaining a secure "golden" image
Deploying and managing container-based runners hosted on EKS
GitOps tools and deployment principles (such as ArgoCD/Flux)
Security Testing
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Interactive Application Security Testing (IAST)
Software Composition Analysis (SCA)
Container scanning tooling (Trivy, Prisma/Twistlock, Neuvector, etc.)
Infrastructure as Code (IaC)
Terraform (writing, managing, and optimizing Terraform configurations)
Other IaC tools (e.g., CloudFormation, Ansible)
Scripting and Programming
Proficiency in scripting languages (e.g., Python, Bash)
Basic to intermediate programming skills
Experience working with a Linux-based shell and navigating Linux systems
Ability to work well in a paired programming environment at times
Automation
Creating and maintaining automated security checks and remediations
Integrating security into automated deployment processes
Incorporating linting tooling into development processes
Incorporating unit & performance testing into deployment processes
Never miss an opportunity! Create an alert based on the job you applied for.
