DevSecOps Engineer

This position requires working directly or indirectly with the US Government in restricted environments. Candidates must be legally authorized to work in the United States without employer sponsorship and may be required to obtain and maintain a U.S. government security clearance in the future.

3-6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related technical field.

Hands-on AWS experience, including networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.

Experience working with one or more security frameworks such as FedRAMP, NIST 800-53, NIST 800-171, CMMC, RMF, or similar standards.

Experience translating security and compliance requirements into practical technical controls alongside engineering teams.

Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.

Knowledge of system hardening vulnerability remediation, secure configurations, and security control lifecycle management.

Strong problem-solving, communication, and cross-functional collaboration skills.

Enjoys being hands-on with infrastructure, automation, security, and release engineering.

Can move comfortably between technical implementation, compliance requirements, documentation, and conversations with engineers and assessors.

Take ownership of issues from identification through remediation and closure.

Prefers building security into engineering workflows rather than treating it as a separate audit function.