Dev/Sec Ops Engineer
All Native Group2 months ago
Washington, DC, USAMid Level
Responsibilities
- Maintain, extend, and refactor Terraform and OpenTofu codebases, including modular configurations, remote state, and backend management.
- Develop and maintain Ansible playbooks and roles for configuration, compliance enforcement, patch management, and application deployment.
- Build and improve GitHub Actions workflows with SAST, dependency scanning, secrets detection, and policy-as-code validation.
- Support secure containerized delivery using Docker, Kubernetes, and Helm, including hardened images, manifests, and vulnerability scanning.
- Enforce Shift-Left security practices, CIS benchmarks, CBO baselines, NIST SP 800-53, and FISMA compliance requirements.
- Follow version control, peer review, change management, and change advisory processes before production deployment.
- Maintain documentation, runbooks, and compliance artifacts for audits and assessments.
- Participate in stand-ups, sprint planning, technical reviews, and knowledge transfer with CBO engineering staff.
Requirements
- Minimum five years of DevSecOps or infrastructure automation experience.
- Hands-on experience with Terraform or OpenTofu, Ansible, and GitHub Actions.
- Working experience with Docker, Kubernetes, Helm, and container security scanning such as Trivy or Grype.
- Experience with SAST tools such as Semgrep, Checkov, or tfsec; secrets scanning tools such as Gitleaks or Detect-Secrets; and OPA/Rego.
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
- Federal or highly regulated environment experience is preferred.
- Certified Kubernetes Administrator or HashiCorp Terraform Associate certification is preferred.
- Must be a U.S. citizen or permanent resident and obtain a Public Trust Tier 2 clearance through a U.S. Capitol Police background check before accessing the CBO network.
Benefits
- Full-time position with flexible hours based on mission requirements.
- Hybrid work environment with on-site support in Washington, DC, and occasional support at data centers in Ashburn and Manassas, Virginia.
- Travel is primarily local during the business day.
- Successful completion of a pre-employment drug screen is required, and employees are subject to random drug screens.
Tech Stack
Categories