TechSur is seeking a DevSecOps Engineer to build the automated pipelines behind a federal customer's multi-cloud platform. This is a part-time (0.5 FTE, about 20 hours per week) role. You will develop CI/CD pipelines that provision infrastructure and deploy applications consistently across AWS, Azure, Google Cloud, and Oracle Cloud, with security testing built into every stage.
Working closely with cloud engineers, security specialists, and customer development and operations teams, you will make Infrastructure-as-Code the standard way environments are built and changed. You will also help the team ship faster without giving up control or compliance.
Key Responsibilities
- Design, build, and maintain multi-stage CI/CD pipelines (build, test, scan, deploy) for infrastructure and customer applications.
- Integrate security testing into pipelines: SAST (SonarQube, Checkmarx), software composition analysis (Snyk, Black Duck), DAST (OWASP ZAP), and container scanning (Trivy, Aqua), with gates that fail builds on high-severity findings.
- Develop reusable Infrastructure-as-Code modules (Terraform, Bicep, CloudFormation) and Ansible playbooks for configuration management.
- Implement GitOps practices (e.g., Argo CD) and policy-as-code checks (OPA/Rego, Checkov) to prevent configuration and IaC drift.
- Set up blue-green and canary deployment strategies with automated health checks and rollback.
- Use CSP-native DevOps services (AWS CodePipeline/CodeDeploy, Azure DevOps, GCP Cloud Build/Cloud Deploy, OCI DevOps) alongside third-party tools.
- Integrate pipelines with ServiceNow to automate change requests and risk-based approvals.
- Document pipeline patterns and coach development and operations teams on DevSecOps practices.
Required Qualifications
- Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.
- At least 5 years of experience developing and maintaining CI/CD pipelines and automating deployment processes.
- Hands-on Infrastructure-as-Code experience with Terraform or an equivalent tool.
- Experience integrating automated security testing (SAST, SCA, DAST, or container scanning) into pipelines.
- Proficiency with Git and at least one CI/CD platform (GitLab CI, GitHub Actions, Azure DevOps, or Jenkins).
- Scripting skills in Python, Bash, or PowerShell.
- Ability to work effectively with development and operations teams.
- Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
- AWS Certified DevOps Engineer – Professional, Microsoft Certified: DevOps Engineer Expert (AZ-400), or HashiCorp Certified Terraform Associate.
- Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).
- Experience with containers and Kubernetes (EKS, AKS, GKE, or OKE).
- Experience with GitOps tools (Argo CD, Flux) and policy-as-code.
- Experience delivering pipelines in federal environments aligned to NIST SP 800-53.
- Prior support of a civilian federal agency.
All your information will be kept confidential according to EEO guidelines.