DevSecOps Engineer Reston VA

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans Transitioning Military National Guard and Reserve Members Military Spouses Wounded Warriors and their Caregivers. If you have the required skill set education requirements and experience please click the submit button and follow the next steps.

Responsibilities
Noblis is looking for a highly experienced DevSecOps Engineer with an active Top Secret/SCI clearance with Polygraph to support critical national security missions.



In this role you will embed security practices into the DevOps lifecycle ensuring security is integrated at every stage of software development. Youll collaborate across development operations and security teams to close gaps and promote a culture of shared accountability for security.



The ideal candidate brings hands-on experience designing secure CI/CD pipelines automating security controls securing Kubernetes environments and guiding or mentoring junior engineers.



Job Responsibilities:

Designing building maintaining and optimizing CI/CD pipelines supporting automated build test security scan and deployment processes.
Integrating automated testing security scanning and compliance validation into pipeline execution to support secure delivery practices.
Developing and managing IaC using Terraform or CloudFormation implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
Implementing security best practices for Docker Kubernetes and EKS including image hardening admission controls policy-as-code and runtime security.
Partnering with teams to design and enforce AWS/Azure security guardrails including IAM least-privilege network controls and encryption standards.
Operationalizing vulnerability management by identifying prioritizing and remediating security threats across applications and infrastructure.
Translating security compliance requirements into automated security controls and audit-ready evidence.
Ensuring that all software development and deployment processes comply with relevant security policies standards and regulations.
Acting as a security champion mentoring junior engineers and developers on secure coding practices and DevSecOps principles.