DevSecOps Engineer

Role overview

Build and secure the continuous delivery pipelines for an enterprise data platform supporting a federal healthcare program. You’ll embed security controls and compliance evidence into routine releases, working with cloud, data, and governance colleagues. The position is contingent on a contract award.

Responsibilities

- Develop and maintain CI/CD pipelines for platform releases. - Integrate automated security scanning and policy enforcement into release workflows. - Protect deployment credentials and secrets, and strengthen pipeline security. - Apply Zero Trust practices and policy-as-code across the platform. - Support continuous compliance and collection of authorization-to-operate evidence. - Coordinate with cloud, data, and governance teams to keep deployments secure and compliant.

Requirements

- DevSecOps experience building CI/CD pipelines in cloud environments; Azure is preferred. - Experience with automated code, dependency, container, and secrets scanning. - A bachelor’s degree. - Authorization to work in the United States. Depending on contract requirements, some roles may also require U.S. citizenship and eligibility to obtain and maintain a federal background investigation or security clearance. - Clear written and verbal communication and ability to work collaboratively in a remote Agile environment.

Nice to have

- Experience managing secrets with a service such as Azure Key Vault and building infrastructure with Terraform or a similar tool. - Familiarity with FISMA, NIST 800-53, or the Risk Management Framework.

Benefits and work setup

- Fully remote role with a technology and education stipend, comprehensive benefits, employer-matched 401(k), flexible paid time off, and paid holidays.