Sr. IT DevSecOps Engineer

Senior DevSecOps Engineer – AWS GovCloud | GitLab CI/CD

Citizenship Required
Performance Period: Through End of Year (Strong Extension Potential)

Build Secure Cloud Pipelines That Power Mission-Critical Systems

We are seeking a Senior DevSecOps Engineer to design and operationalize secure, automated delivery pipelines within AWS GovCloud environments. This role is for a hands-on engineer who excels at integrating security into every layer of CI/CD while driving reliability, scalability, and speed.

You will architect GitLab-based DevSecOps pipelines, strengthen container security posture, and enable high-velocity application delivery without compromising compliance or governance.

If you thrive in high-security environments where automation, cloud infrastructure, and security engineering intersect — this role is built for you.

What You’ll Lead & Deliver

• Architect and manage GitLab CI/CD pipelines supporting secure AWS GovCloud deployments
• Design reusable CI/CD templates and optimize GitLab runners (including EKS-hosted runners)
• Embed security scanning (SAST, DAST, IAST, SCA, container scanning) directly into pipeline workflows
• Build and maintain hardened “golden” container images and enforce container security standards
• Implement GitOps deployment strategies using tools such as ArgoCD or Flux
• Optimize Terraform-based infrastructure as code for scalable, secure cloud provisioning
• Reduce deployment friction while increasing release confidence and security posture
• Partner with development teams to improve automation, testing, and code quality practices

Your Technical Expertise

DevSecOps & CI/CD

• Advanced GitLab knowledge (pipelines, runners, merge requests, issue tracking)
• Strong Git version control practices (branching, promotion, semantic release strategies)
• Experience building reusable CI/CD components or workflow templates

AWS Cloud (GovCloud Experience Preferred)

Hands-on experience with:

• EC2, Lambda, S3, EBS/EFS
• ECS and/or EKS (Kubernetes in AWS)
• SNS and CloudWatch
• Secure IAM and cloud-native monitoring practices

Containers & Kubernetes

• Docker image build, optimization, and lifecycle management
• Kubernetes orchestration, deployment strategies, and troubleshooting
• Container hardening and vulnerability management
• Managing container-based GitLab runners

Infrastructure as Code

• Advanced Terraform development and optimization
• Experience with CloudFormation, Ansible, or similar IaC tools

Security Automation

• Integrating SAST, DAST, IAST, and SCA into CI/CD pipelines
• Container scanning tools (Trivy, Prisma/Twistlock, Neuvector, etc.)
• Automated remediation workflows
• Incorporating linting, unit testing, and performance testing into pipelines

Scripting & Systems

• Strong Python and/or Bash scripting
• Comfortable navigating and administering Linux environments
• Collaborative mindset for paired engineering sessions

Certifications (Preferred, Not Required)

• GitLab Certification
• AWS Certification

What Sets You Apart

• You think in systems and automation, not manual processes
• You proactively eliminate bottlenecks and security gaps
• You design solutions that balance velocity with compliance
• You enjoy mentoring developers on secure DevOps practices

Why Join

• Work on secure, high-impact cloud infrastructure
• Own architecture decisions in a GovCloud environment
• Long-term contract stability with strong extension potential
• Collaborate with senior engineers on mission-driven systems

If you are a DevSecOps leader who believes security should accelerate delivery — not slow it down — we want to speak with you.