DevSecOps Engineer
No salary listed
Mid, Senior
Bachelor's
Morrisville, NC, USA
In Person
DevOps & InfrastructureDevOps Engineering
About the job
Requirements
- Three to seven years of experience in DevOps, DevSecOps, Systems Engineering, Platform Engineering, Infrastructure Automation, or a related technical discipline.
- Experience building or supporting CI/CD pipelines in enterprise environments.
- Experience working with Git-based source control systems.
- Experience supporting Windows and Linux environments.
- Experience developing automation scripts and tools.
- A bachelor's degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent experience.
- Knowledge of Jenkins, GitLab CI/CD, GitHub Actions, Git-based source control, and release management.
- Knowledge of Terraform, Ansible, Infrastructure as Code, and configuration management.
- Knowledge of Docker, Kubernetes, and Rancher.
- Knowledge of OpenText Fortify, SAST, DAST, Software Composition Analysis, secrets management, and Tenable Vulnerability Management.
- Knowledge of Python, JavaScript, TypeScript, Java, C#, PHP, and REST APIs.
- Knowledge of Windows Server, Red Hat Enterprise Linux, Microsoft SQL Server, and Oracle Database.
- Ability to obtain a Public Trust clearance.
Responsibilities
- Analyze, design, implement, automate, secure, test, deploy, and manage the lifecycle of enterprise applications and supporting infrastructure within the NIEHS environment.
- Integrate development, security, and operations practices throughout the Software Development Lifecycle, ensuring compliance with Federal security requirements and supporting enterprise modernization initiatives.
- Work with software developers, database administrators, systems engineers, cybersecurity personnel, project managers, and business stakeholders to deliver secure, reliable, and automated application solutions.
- Design, implement, maintain, and optimize enterprise CI/CD pipelines for software development and deployment.
- Develop automated workflows for code integration, testing, security validation, packaging, release management, and deployment.
- Administer and support CI/CD platforms, including Jenkins, GitLab CI/CD, and GitHub Actions.
- Support source code management platforms and branching strategies.
- Implement deployment automation across development, integration, testing, staging, and production environments.
- Monitor pipeline performance and continuously improve delivery efficiency and reliability.
- Migrate software builds through development, testing, integration, and production environments.
- Monitor deployment activities and remediate deployment failures within established service level agreements.
- Develop and maintain Infrastructure as Code solutions using Terraform.
- Implement automated configuration management using Ansible.
- Develop reusable infrastructure modules, templates, and automation frameworks.
- Automate operational, administrative, and deployment processes.
- Support environment standardization and infrastructure modernization initiatives.
- Implement automated provisioning and configuration management across enterprise environments.
- Support containerized application deployments using Docker and Kubernetes platforms.
- Administer Rancher-managed Kubernetes environments.
- Manage container image lifecycle processes and private container registries.
- Implement container security best practices and vulnerability remediation procedures.
- Support runtime security monitoring and compliance initiatives.
- Assist application teams with container adoption, deployment patterns, and troubleshooting.
- Integrate security controls and automated testing throughout the Software Development Lifecycle.
- Configure and maintain application security tools, including OpenText Fortify, Dynamic Application Security Testing, Software Composition Analysis, and secrets management and scanning tools.
- Review vulnerability findings and collaborate with development teams to remediate issues.
- Implement automated security gates and quality control processes.
- Support secure software development initiatives aligned with Federal security requirements.
- Promote DevSecOps best practices across development and operations teams.
- Support vulnerability management activities using Tenable and related security platforms.
- Conduct vulnerability assessments, remediation tracking, and risk analysis.
- Develop mitigation strategies when vulnerabilities cannot be remediated within required service levels.
- Coordinate mitigation approvals with Information System Security Officers.
- Implement approved mitigation plans following established change management procedures.
- Maintain compliance with FISMA, NIST 800-53, NIST Secure Software Development Framework, NIH and HHS security policies, and Zero Trust Architecture principles.
- Support audit readiness and compliance reporting activities.
Desired Qualifications
- Security+ certification or similar.
- Terraform Associate certification or similar.
- Certified Kubernetes Application Developer certification or similar.
- Certified Kubernetes Administrator certification or similar.
- GitLab CI/CD certification or similar.
- Azure Fundamentals or equivalent cloud certification.
- Certified DevSecOps Professional certification or similar.
- ITIL Foundation certification or similar.
About the company
Computer World Services provides IT services and support to the Federal Government, focusing on mission-critical and enterprise needs. Its offerings include IT operations and maintenance, systems architecture and engineering, cloud solution services, agile software development, call center outsourcing, and cybersecurity. The company works by delivering a range of services through a staff of 400+ across 20+ federal customers worldwide, pairing hands-on operations with engineering, cloud, and security capabilities to meet government missions. It differentiates itself through formal quality and process certifications (ISO 9001:2015 and CMMI-DEV Level 3) and a track record of ongoing process improvement. The company’s goal is to provide reliable, secure, and scalable IT support and development to federal agencies, ensuring mission success and continual performance improvement.
Company Size
201-500
Company Stage
N/A
Total Funding
N/A
Headquarters
Falls Church, Virginia
Founded
1990
Get referred to Computer World Services
See people who can refer or advise you
Simplify's Take
What believers are saying
- AMIC extended CWS's $213.3 million Air Force cyberspace contract through October 2, 2031.
- CWS won a $19.8 million Integrated Air Force Network Operations and Services award in April 2026.
- FY2026 YTD obligations reached $40.8 million across 30 actions, signaling active capture.
What critics are saying
- CWS's GSA MAS period ends September 15, 2026, forcing recompete pressure.
- GAO protest B-424228 remains open through November 12, 2026, risking DFAS revenue.
- Air Force concentration and bid protests expose CWS to contract loss and shrinkage.
What makes Computer World Services unique
- CWS holds GSA MAS, OASIS+, ITES-3S, and CIO-SP3 vehicles across 2026.
- It serves 20-plus federal customers globally with ISO 9001 and CMMI-DEV Level 3.
- Its Air Force network operations and cybersecurity work sits inside mission-critical systems.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Hybrid Work Options