DevSecOps Engineer

Engineering Remote / Rockville, MD Full-time Public Trust

As a DevSecOps Engineer at Softek, you will build and maintain CI/CD pipelines that integrate security scanning at every stage of the software delivery lifecycle. You will automate infrastructure provisioning, implement container orchestration, and ensure that all deployments meet federal security standards. You will work closely with development teams to shift security left and embed compliance into the development workflow.

Key Responsibilities

• Design and maintain CI/CD pipelines using GitHub Actions, Azure DevOps, or Jenkins
• Integrate SAST, DAST, and dependency scanning into build pipelines
• Manage container orchestration with Kubernetes or ECS in government cloud environments
• Automate infrastructure provisioning and configuration management
• Implement monitoring, logging, and alerting solutions
• Collaborate with security teams on vulnerability remediation and compliance

Required Qualifications

• 4+ years of experience in DevOps or DevSecOps roles
• Strong experience with CI/CD tools (GitHub Actions, Azure DevOps, Jenkins)
• Proficiency with containerization (Docker, Kubernetes)
• Experience with infrastructure-as-code (Terraform, Ansible, or similar)
• Ability to obtain and maintain a Public Trust clearance
• U.S. citizenship or permanent residency

Preferred Qualifications

• Experience with security scanning tools (SonarQube, Checkmarx, Twistlock)
• Knowledge of NIST 800-53 and STIG compliance requirements
• AWS or Azure DevOps certifications
• Experience supporting ATO processes in federal environments

8(a) sole source up to $4.5M. HUBZone. GSA MAS 47QTCA18D007G.