DevSecOps Engineer

Location: Reston, VA
Work Model: On-site (Reston, VA)
Compensation: Competitive, Based on Experience

Overview

We're seeking an experienced DevSecOps Engineer to help modernize and scale secure software delivery across complex, mission-critical environments.

This is a hands-on engineering opportunity focused on building secure, automated, and reliable software delivery systems. You'll design and improve CI/CD pipelines, integrate security controls into development workflows, and help establish scalable deployment practices across enterprise engineering teams.

The ideal candidate combines strong automation and platform engineering skills with a practical understanding of cybersecurity. You'll have the opportunity to influence how software moves from development into production, solve challenging infrastructure problems, and build tools and processes that make engineering teams more effective.

What You'll Do

• Design, implement, and optimize secure CI/CD pipelines using Azure DevOps, including YAML templates, automated quality gates, and release controls.
• Integrate security testing and compliance checks into software delivery workflows, including SAST, SCA, secrets detection, dependency scanning, and container security.
• Support artifact management and code-quality processes using tools such as Nexus, SonarQube, and Azure DevOps.
• Develop and standardize secure deployment practices for containerized applications running on Kubernetes and K3s.
• Troubleshoot complex pipeline, build, dependency, permissions, and deployment issues.
• Automate repetitive engineering tasks and improve the reliability, consistency, and efficiency of software releases.
• Collaborate with software engineers, cybersecurity teams, and platform engineers to implement practical security controls.
• Create reusable pipeline templates, technical documentation, and operational runbooks to support engineering teams.

What We're Looking For

• 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, or a related technical discipline.
• Hands-on experience building and maintaining CI/CD pipelines using Azure DevOps.
• Experience integrating automated security and quality controls into software development workflows.
• Strong understanding of secure software delivery, including vulnerability scanning, dependency management, and artifact security.
• Experience with containerized applications and Kubernetes, K3s, or comparable orchestration platforms.
• Scripting and automation experience using Python, Bash, PowerShell, or similar languages.
• Strong troubleshooting skills across CI/CD pipelines, build systems, and deployment infrastructure.
• Ability to collaborate across technical disciplines and communicate complex engineering concepts clearly.
• Ability to obtain and maintain a U.S. security clearance.

Preferred

• Active U.S. security clearance.
• Experience with Azure DevOps Server in secure or enterprise environments.
• Hands-on experience with Nexus, SonarQube, or comparable artifact-management and code-quality platforms.
• Familiarity with software supply-chain security, including SBOMs, artifact signing, and software provenance.
• Experience with Helm, Kubernetes RBAC, admission controls, or policy-as-code.
• Infrastructure-as-Code experience with Terraform, Ansible, or similar technologies.
• Experience with observability tools such as Prometheus, Grafana, or Loki.
• Familiarity with NIST, RMF, CMMC, STIG, or comparable security and compliance frameworks.