DevSecOps - CI/CD - IaC Engineer

About this role

Type of Requisition: Regular

Clearance Level Must Currently Possess: None

Clearance Level Must Be Able to Obtain: None

Public Trust/Other Required: BI Full 6C (T4)

Job Family: Cyber and IT Risk Management

Job Qualifications: Skills: Cloud DevOps, DevOps, DevSecOps Certifications: None Experience: 5 + years of related experience US Citizenship Required: No

Job Description: Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program.  The CMM program is an initiative to support the Administrative Office of the US Courts (AO) in developing a modern cloud-based solution to support all 204+ federal courts across the United States.

GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career. The DevSecOps - CI/CD - IaC Engineer will work as part of the CMM Data Modernization and Governance team responsible for delivering an integrated data governance, engineering, data platform, reporting, analytics, and Artificial Intelligence (AI)/Machine Learning (ML) capabilities that support operational decision-making and fulfill AO's data and analytics objectives in support of the CMM program.

The successful candidate will be responsible for automating software delivery, deployment pipelines, infrastructure provisioning, configuration, security controls, and operational processes across CMM cloud data environments. The role integrates security throughout the software and infrastructure lifecycle and serves as a Senior Cloud Security Specialist, ensuring cloud platforms and data environments are securely designed, deployed, monitored, and operated.

THE DEVSECOPS - CI/CD - IaC ENGINEER WILL EXECUTE THE FOLLOWING RESPONSIBILITIES • Deliver DevSecOps platform services that embed security, compliance, and monitoring across the full cloud and data product lifecycle. • Integrate automated security controls, vulnerability management, policy compliance, and continuous monitoring into CI/CD and IaC workflows. • Build, maintain, optimize CI/CD pipelines for automated build, test, security scanning, & deployment. • Ensure all code and IaC changes are version‑controlled, peer‑reviewed, security‑scanned, and governed by change‑control gates. • Automate cloud infrastructure provisioning and configuration using IaC tools (Terraform, CloudFormation, ARM/Bicep). • Implement SAST/DAST, dependency, and container scanning within pipelines; maintain rollback procedures and deployment monitoring. • Define and enforce cloud security architecture, IAM policies, secrets management, encryption, and network security controls. • Conduct security reviews, threat modeling, and vulnerability assessments for pipelines and cloud infrastructure. • Monitor environments for security events, misconfigurations, and compliance drift; lead remediation. • Maintain artifact repositories, release automation, configuration management, and environment provisioning. • Develop policy‑as‑code guardrails and automated compliance checks for IaC and CI/CD systems. • Integrate and coordinate DevSecOps standards with AO teams to ensure enterprise interoperability. • Provide documentation, training, and end‑user guidance for pipelines, tooling, and security practices. • Review and update DevSecOps toolsets based on emerging threats and technologies; produce metrics reports (deployment frequency, MTTR, remediation times). • Support incident response for security issues involving infrastructure, pipelines, or deployments. • Collaborate with development, operations, governance, and security teams for unified visibility and secure delivery processes.

QUALIFICATIONS • Education: Bachelor's degree in Computer Science, Software Engineering, or related field. • Experience: 5+ years of experience in IT system engineering, systems development, systems coding and programming. . • Experience leading cloud migrations or major modernization initiatives. • Strong knowledge of large‑scale infrastructure migration methods (IaaS/PaaS) and AWS cloud platforms. • Deep understanding of cloud security, compliance, IAM, encryption, network security, and control frameworks. • Strong scripting skills (Python, Bash, Ruby, Perl) for automation and tooling. • Extensive experience building and supporting automated DevSecOps and CI/CD pipelines (Jenkins, GitLab, GitHub Actions, Azure DevOps). • Solid background in Infrastructure as Code using Terraform, CloudFormation, or ARM/Bicep. • Hands‑on experience with cloud APIs, cloud automation, and multi‑cloud/hybrid operations. • Proficient with DevOps toolchains (Git, Jira, Confluence, Ansible, SonarQube, Fortify, Maven, Bamboo). • Experience developing, testing, and maintaining containerized applications and Kubernetes-based workloads. • Strong experience supporting full DevOps lifecycle (CI, testing, deployment, monitoring). • Experience managing AWS private/public cloud deployments and automating cloud infrastructure provisioning. • Capability to design, secure, and operate enterprise-scale CI/CD pipelines for diverse applications. • Strong “security‑first” mindset and experience integrating SAST/DAST, dependency, and container scanning. • Skilled in artifact management, release engineering, and build pipeline optimization. • Ability to mentor teams on secure software delivery, DevSecOps practices, and IaC standards.

CERTIFICATIONS (Preferred) One or more of the following certifications is preferred but not required . • Certified Data Management Professional (CDMP) • Snowflake SnowPro Advanced • Databricks Certified Data Professional • AWS Certified Data Analytics - Specialty • AWS Certified Solutions Architect - Professional • AWS Certified Data Engineer • Docker Certified Associate • Certified Kubernetes Administrator • Certified Professional DevSecOps Certification Course • ITIL, AWS SysOps, Google Cloud DevOps Engineer

Seize your opportunity to make a personal impact supporting the Case Management Modernization (CMM) Program.  The

Similar jobs

• DevSecOps Engineer — Draper · Cambridge, MA
• DevSecOps Engineer — Darkwolfsolutions · Arlington, VA
• DevSecOps Engineer — Towne Park · Remote
• DevSecOps Engineer — Ardentmc · Remote
• DevSecOps Engineer — Maxar · Herndon, VA
• DevSecOps Engineer — CACI · Tampa, FL | Sarasota, FL
• DevSecOps Engineer — CACI · King of Prussia, PA | Aurora, CO | Chantilly, VA
• DevSecOps Engineer — Chaosindustries · El Segundo, California, United States