Dev/Sec Ops Engineer
HybridWashington, District of Columbia, United States or Washington, United States
Job Summary
Maintain, extend, and refactor Terraform and OpenTofu codebases while developing Ansible playbooks for configuration and compliance enforcement. Build GitHub Actions workflows with integrated security gates including SAST, dependency scanning, and policy-as-code validation. Support containerized delivery using Docker and Kubernetes, authoring hardened images and manifests with vulnerability scanning prior to deployment. Integrate shift-left security throughout the delivery lifecycle, enforcing CIS benchmarks and supporting NIST SP 800-53 and FISMA compliance. Work within version control and change management workflows, producing documentation and runbooks to support audits. Participate in stand-ups and technical reviews to conduct knowledge transfer with engineering staff. This role augments the Congressional Budget Office's engineering team in a hybrid-cloud environment, requiring a Public Trust Tier 2 clearance and extensive travel.
Required Qualifications
- Minimum of 5 years of DevSecOps or infrastructure automation experience
- Hands-on experience with Terraform/OpenTofu
- Hands-on experience with Ansible
- Hands-on experience with GitHub Actions
- Working experience with Docker
- Working experience with Kubernetes
- Working experience with Helm
- Experience with container security scanning (Trivy, Grype, or equivalent)
- Experience with SAST tooling (Semgrep, Checkov, tfsec)
- Experience with secrets scanning (Gitleaks, Detect-Secrets)
- Experience with OPA/Rego
- Public Trust Tier 2 clearance
- U.S. citizen or permanent resident
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience
- Must successfully complete a pre-employment drug screen
- Subject to random drug screens throughout the term of employment
- Must be available for travel
- Must be available for on-site support at CBO facilities in Washington, DC
- Must be available for occasional support at the Ashburn, VA and Manassas, VA data center locations
- Must be able to talk or hear
- Must be able to work in a hybrid environment
- Must be able to work flexible hours based on mission requirements
- Must be able to work in executive settings
- Must be able to use executive office equipment
- Must be able to use classified communication systems
- Must be able to make high-stress decisions
- Must be able to perform frequent engagement at the highest levels of Navy leadership
Desired Qualifications
- Federal or highly regulated environment experience
- Certified Kubernetes Administrator (CKA)
- HashiCorp Terraform Associate
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.