DevSecOps Engineer

Role: DevSecOps Engineer

Location: Washington, DC

Work Type: Hybrid (3 days @office)

Note: Need Minimum 14+ Years of experience.

Key Responsibilities
Design and implement secure CI/CD pipelines using AWS Code Pipeline, Code Build, and Code Deploy.

• Configure and manage blue/green deployments for zero-downtime releases.
  Automate infrastructure provisioning using Terraform and AWS CDK (Python).
  Integrate security scanning tools (SAST, DAST, SCA) into build and deployment workflows.
  Collaborate with development and operations teams to enforce secure coding and deployment standards.
  Monitor and respond to vulnerabilities across applications and infrastructure.
  Ensure compliance with security policies and cloud governance frameworks.
  Maintain documentation for security processes, configurations, and deployment strategies.
  Required Skills
  Strong hands-on experience with AWS services, including:
  o Code Pipeline, Code Build, Code Deploy
  o IAM, EC2, Lambda, S3, CloudFormation
  Proficiency in Python, especially for infrastructure automation using AWS CDK.
  Experience with Terraform for infrastructure-as-code.
  Familiarity with Bitbucket for source control and pipeline management.
  Knowledge of containerization and orchestration (Docker, Kubernetes).
  Experience with security tools (e.g. Checkmarx, SonarQube).
  Understanding of security frameworks (e.g., OWASP, NIST, CIS).
  Preferred Certifications
  AWS Certified DevOps Engineer
  Certified DevSecOps Professional (CDP)
  CISSP or equivalent security certification
  Soft Skills
  Strong analytical and problem-solving abilities.
  Excellent communication and collaboration skills.
  Ability to work independently and in cross-functional teams.