- Company Name
- Imagineeer
- Job Title
- DevSecOps Engineer
- Job Description
-
Job title: DevSecOps Engineer
Role Summary: Design, build, and operate secure GitLab‑based CI/CD pipelines for federal programs, embedding security controls, compliance, and automation throughout the SDLC while ensuring alignment with FISMA, NIST 800‑53, FedRAMP, and Zero Trust principles.
Expectations: Deliver end‑to‑end secure pipelines that meet federal security requirements, collaborate with development, security, and infrastructure teams, and maintain continuous compliance and risk mitigation.
Key Responsibilities
- Design, implement, and maintain scalable GitLab CI/CD pipelines for microservices, APIs, and IaC projects.
- Create standardized pipeline templates and reusable jobs to ensure consistent delivery across programs.
- Integrate automated build, test, security scanning (SAST, DAST, SCA, container & IaC scanning), and deployment stages.
- Optimize pipeline performance (caching, parallelization, artifact handling) to reduce build/deploy times.
- Embed security controls early in the pipeline (policy‑as‑code, compliance checks, configuration drift detection).
- Provision and manage cloud/on‑prem environments via IaC (Terraform, Ansible, CloudFormation).
- Integrate CI/CD with monitoring, logging, and alerting for full visibility.
- Ensure secure configuration of runners, secrets management, and artifact repositories per agency policy.
- Collaborate with ISSOs, AO teams, and stakeholders to produce ATO documentation and support security assessments.
- Provide training, guidance, and documentation on DevSecOps best practices and GitLab usage to engineering and non‑technical teams.
Required Skills
- 5+ years DevOps/DevSecOps experience; 3+ years GitLab CI/CD design and management.
- Strong experience with GitLab SaaS or self‑managed, runners, GitLab registry.
- Proficiency in at least one language: Python, Java, JavaScript/TypeScript, .NET, Go.
- Container and orchestration expertise: Docker, Kubernetes (EKS/AKS/GKE or on‑prem).
- IaC proficiency: Terraform and/or Ansible.
- Security tooling: SAST, DAST, SCA, container image scanning, secrets scanning.
- Cloud deployment experience: AWS, Azure, GCP, and/or federal private/on‑prem clouds.
- Knowledge of NIST, FedRAMP, Zero Trust, and federal security control families.
- Scripting/automation: Bash, Python, or equivalent.
- Ability to communicate complex technical concepts to non‑technical stakeholders.
Required Education & Certifications
- U.S. Citizenship and eligibility for public trust clearance.
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent practical experience).
- (Optional but advantageous) DevOps/Cloud: AWS/Azure/GCP Associate or Professional; Kubernetes (CKA/CKAD).
- (Optional) Security: Security+, CISSP, CSSLP.
- (Optional) GitLab Certified Associate or Professional.
Washington, United states
Hybrid
Mid level
18-02-2026