DevSecOps Engineer

Responsibilities

• Design and implement DevSecOps processes to integrate security controls into software development, build, release, and deployment workflows
• Build and maintain CI/CD pipelines featuring automated security testing, code scanning, dependency scanning, and secrets detection
• Support cloud and platform engineering teams with secure configuration, infrastructure as code, container security, and IAM practices
• Collaborate with developers, architects, and cyber teams to remediate vulnerabilities and improve secure coding practices
• Produce technical documentation and implementation artifacts to support delivery and audit readiness

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, IT, Engineering, or Mathematics
• 4+ years of experience implementing DevSecOps practices across cloud or hybrid environments
• 4+ years of experience building or administering CI/CD pipelines (e.g., Jenkins, GitLab CI, GitHub Actions, or Azure DevOps)
• 2+ years of experience integrating application security testing, dependency scanning, or container security into pipelines
• 3+ years of experience with AWS, Azure, or GCP, and infrastructure as code (e.g., Terraform, CloudFormation, or Ansible)
• Active Secret Clearance required
• Ability to work onsite in the DMV area up to 5 days a week and travel approximately 20%

Preferred Qualifications

• Experience supporting federal, state, local, or higher education environments
• Knowledge of NIST 800-53, NIST SSDF, FedRAMP, or Zero Trust security requirements
• Experience with Docker, Kubernetes, OpenShift, or container orchestration security
• Proficiency with security tooling such as SonarQube, Snyk, Prisma Cloud, or Aqua
• Experience developing automation using Python, PowerShell, Bash, or Go
• Relevant certifications (e.g., CISSP, CCSP, AWS Certified Security, or CKS)

Benefits

• Competitive salary range ($107,925 to $188,000 based on experience and location)
• Discretionary annual incentive programs
• Comprehensive benefits package including health and wellness support
• Opportunities for professional development, mentorship, and continuous learning

About the Company

Deloitte's Government & Public Services (GPS) practice helps federal, state, and local government clients fulfill their missions through digital transformation. Our Enterprise Security offering embeds security into every aspect of technology, securing the technical backbone of our clients while enabling innovation.