Category: Information Technology

Employment Type: Direct Hire

Reference: 15886-32250872

Yoh has an exciting opportunity for a talented DevSecOps Engineer to join our Technology (Public Sector) client on a full time basis. The ideal candidate will possess 9+ years of relevant work experience, and have strong expertise in developing and building scalable, automated DevSecOps infrastructure.

See below for abbreviated job responsibilities and requirements. If after reviewing, you are interested in learning more about this, or other opportunities, please apply with your updated resume ASAP.

Title: Senior DevSecOps Engineer
Compensation: $140,000-$165,000/year (depending on experience level)
Type: Full Time
Industry: Technology (Public Sector)
Location: Remote, USA
Responsibilities:

• Support the planning, design, and development of FedRAMP-authorized cloud-based capabilities tailored to DevSecOps principles for customer-directed initiatives, ensuring a security-first approach throughout the development lifecycle.
• Coordinate with and provide expertise to third-party vendors and Original Equipment Manufacturers (OEMs) to integrate DevSecOps tools, processes, and technology that align with reengineered designs.
• Offer recommendations on cloud strategies, tool selection for CI/CD, and technology stacks to improve automation, monitoring, and overall security.
• Analyze system needs with a focus on automation, security, and scalability to ensure future-proofed performance expectations, integration limitations, and organizational goals.
• Design and optimize cloud-based DevSecOps pipelines, working closely with architects to build configurations of hardware, software, network security, and cloud services that support secure and efficient CI/CD processes.
• Develop and maintain functional design specifications and project plans.
• Deploy, test, and debug DevSecOps pipeline automation components, ensuring best practices in secure coding, ization, automated testing, and security compliance.
• Develop integrated system test requirements, documentation, and strategies for end-to-end testing across CI/CD environments.
• Design and implement backup procedures and monitor pipeline performance to identify areas for further automation and optimizations.
• Monitor the consumption of cloud resources, fulfillment turnaround, application performance, and overall system security to maintain a high-performance, secure DevSecOps environment.

• Bachelor's degree in IT, engineering, computer science, or related field (master's degree preferred).
• 9+ years of related experience (additional years of experience may be considered in lieu of a degree).
• Secret clearance with the ability to obtain a Top Secret clearance.
• Meet Information Assurance requirements in accordance with DoD 8140, including Security+, CISSP.
• AWS and/or Azure certification, with familiarity in enterprise cloud and DevSecOps tools and practices-GitLab, Kubernetes, Terraform, Ansible.
• Experience in implementing secure CI/CD pipelines, orchestration (e.g., Kubernetes), and infrastructure as code in cloud environments.
• Proficiency with GitLab for source code management (SCM), version control, and CI/CD pipelines or equivalent (such as GitHub).
• Experience with Static Application Security Testing (SAST) tools such as SonarQube, Checkmarx, or equivalent.
• Experience with Software Composition Analysis (SCA) tools such as Anchore, Trivy, Syft, Grype or equivalent.
• Familiarity with Nessus / Tenable.io as well as orchestration tools (Kubernetes, Rancher, OpenShift).
• Experience with Open Policy Agent for policy enforcement, and Artifactory for storing and managing application binaries and dependencies.