Platform Engineer (DevSecOps)

Position : Platform Engineer

Location: McLean, VA (Onsite – 4 Days/Week)

Duration: 6 Months Contract (Potential Extension)

Citizenship: U.S. Citizen

Pay Rate: $80–$90/hr W2

Clearance: Must be eligible to obtain a Secret Clearance

Position Overview

We are seeking an experienced Platform Engineer (DevSecOps) to support mission-critical systems by integrating security into software development and delivery pipelines. The ideal candidate will have strong experience in DevSecOps, cybersecurity engineering, CI/CD automation, cloud security, and federal/defense cybersecurity compliance.

Key Responsibilities

• Design, implement, and enhance secure CI/CD pipelines by integrating SAST, DAST, SCA, and container scanning tools.
• Automate vulnerability detection, security assessments, and remediation workflows.
• Implement and maintain Infrastructure as Code (IaC) using Terraform and Policy as Code.
• Strengthen AWS cloud security and Kubernetes environments.
• Support Risk Management Framework (RMF), continuous ATO, System Security Plans (SSPs), and compliance activities.
• Apply NIST 800-53 security controls and federal cybersecurity standards.
• Implement Zero Trust security principles across DevSecOps pipelines and the software development lifecycle.
• Collaborate with development, operations, and security teams to improve secure software delivery.

Required Qualifications

• 5+ years of experience in Cybersecurity Engineering / DevSecOps, preferably in federal or defense environments.
• 3+ years of software engineering experience using Python, TypeScript, or Bash.
• 2+ years of experience implementing cybersecurity solutions in AWS and Kubernetes environments.
• Hands-on experience with CI/CD, DevSecOps, IaC/CaC, and secure SDLC practices.
• Strong knowledge of Terraform, security automation, vulnerability scanning, and remediation.
• Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager, STIG Viewer, and SCAP tools.
• Experience with AI-assisted development tools such as Claude Code, Codex, or Pi.
• Ability to obtain a Secret Security Clearance.
• High school diploma or GED required.

Nice-to-Have Qualifications

• Active Secret Security Clearance.
• Experience implementing Zero Trust security solutions.
• Knowledge of GRC engineering, policy-as-code, automated compliance validation, and continuous control monitoring.
• Experience with POA&M management, audit evidence collection, and compliance reporting.
• Security+, AWS Solutions Architect, AWS Security, or CISSP certification.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field.