ForgeApply · Job listing
Senior DevOps CI/CD Engineer – AWS (DevSecOps Champion)
GDIT
See all 107 open roles at GDIT →
Tailor your resume for this GDIT job in about a minute.
ForgeApply tailors your resume and cover letter to this exact posting, then hands you a ready-to-submit application for GDIT's site. Free trial, no card required.
About this role
Type of Requisition: Regular
Clearance Level Must Currently Possess: Secret
Clearance Level Must Be Able to Obtain: Secret
Public Trust/Other Required: None
Job Family: Software Engineering
Job Qualifications: Skills: Controls Compliance, Identity Access Management (IAM), Secure Software Development, Security Testing, Web Applications Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes
Job Description: DEVOPS ENGINEER PRINCIPAL GDIT is looking for a Engineer – AWS (DevSecOps Champion) a senior technical role supporting DOJ Homeland Security Task Force (HSTF) / National Coordination Center (NCC). This role leads secure CI/CD and DevSecOps practices for AWS-based solutions, designing and governing pipelines and automation that embed security, compliance, and risk management into the delivery lifecycle for mission‑critical systems.
Responsibilities • Define and enforce secure CI/CD and DevSecOps standards, patterns, and guardrails for AWS-hosted applications, in alignment with GDIT Cyber Security Policy, Cyber Security Handbook, and Cloud/Security standards.
• Design, build, and maintain CI/CD pipelines (e.g., AWS CodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps) with integrated security scanning, compliance checks, approvals, and testing.
• Lead infrastructure‑as‑code (IaC) implementations (CloudFormation, Terraform) with embedded security and configuration baselines, supporting secure provisioning of AWS environments.
• Automate secure environment provisioning, configuration, and deployments across development, test, and production AWS accounts, in line with cyber and IT risk management requirements.
• Implement monitoring, logging, and alerting (CloudWatch, CloudTrail, centralized logging) to support secure, observable, and auditable delivery pipelines.
• Integrate identity and access management, encryption, secrets management, vulnerability scanning, and compliance controls into CI/CD workflows as part of DevSecOps practices.
• Ensure CI/CD pipelines and AWS solutions comply with applicable contractual and regulatory requirements (e.g., NIST 800‑53/171, CMMC, FedRAMP, ISO 27001) and internal cyber standards.
• Collaborate with application development, cloud platform, cyber security, IT risk, and operations teams to ensure architectures are “DevSecOps-ready” and align with secure development standards.
• Provide technical leadership, coaching, and documentation for project teams adopting DevSecOps and secure CI/CD practices; develop reusable secure pipeline templates and patterns.
• Support proposals, technical reviews, and risk assessments where secure CI/CD, cloud security, and DevSecOps capabilities are required, including input to labor category mapping and staffing.
Basic Qualifications • Bachelor’s degree in Computer Science, Information Systems, Engineering, Cyber Security, or related field; or equivalent experience.
• Typically 8+ years of relevant IT experience, with significant experience in DevOps/DevSecOps and CI/CD for production systems.
• Hands‑on experience with AWS services (e.g., EC2, ECS/EKS, S3, IAM, VPC, CloudWatch/CloudTrail) in security‑sensitive or regulated environments.
• Proven experience designing and operating CI/CD pipelines using one or more modern platforms (AWS CodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps).
• Strong experience with infrastructure‑as‑code (e.g. CloudFormation, Terraform) and secure configuration management and automation.
• Demonstrated experience promoting signed builds into an air-gapped, classified, or otherwise network-isolated target environment, including artifact transfer procedures and post-deployment verification. • Experience with containers and orchestration (e.g. Docker, ECS, EKS, Kubernetes) including security aspects (image scanning, runtime security, least privilege).
• Demonstrated experience integrating security testing, vulnerability scanning, and compliance checks into CI/CD workflows (DevSecOps).
• Experience working under formal security and risk frameworks (e.g., NIST 800‑53/171, CMMC, FedRAMP, ISO 27001, customer‑specific cyber requirements).
• Strong communication and collaboration skills, with ability to work across cyber, risk, engineering, and program management teams.
Preferred Qualifications • AWS certifications (e.g., AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Solutions Architect).
• Security/DevSecOps certifications.
• Experience supporting or implementing secure cloud architectures.
• Experience in enterprise DevSecOps or security transformation initiatives, or in a cloud/cyber center of excellence.
• Experience with multi‑account AWS Organizations, landing zones, and centralized security/governance services.
OWN YOUR OPPORTUNITY Explore a career in software development at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your dedication to advancing innovation.
The likely salary range for this position is $144,500 - $195,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
Scheduled Weekly Hours: 40
Travel Required: 50-75%
T elecommuting Options: Hybrid
Work Location: USA VA Fairfax
Additional Work Locations:
Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parenta
Tailor your resume for this GDIT role before you apply.
Tailor my resume for this jobSimilar jobs
- Sr. DevOps Engineer (AWS) — Fanniemae · Reston, VA
- Senior AWS DevSecOps Engineer — Accenturefederalservices · Tampa, FL
- Senior DevOps Cloud Engineer — Worldpay · CINCINNATI, OHIO | DENVER, COLORADO | ATLANTA, GEORGIA
- Senior AWS DevOps / Platform Engineer — Guidehouse · Remote
- Senior DevOps Engineer - AWS/Java/Linux/Ansible/Git/Python — Captivation · Hanover, MD
- Senior DevOps Engineer - AWS/Java/Linux/Ansible/Git/Python — Captivation · Aberdeen Proving Grounds, MD
- Senior DevOps Engineer - Cloud Operations — Blackduck · Burlington, MA
- Senior DevOps Engineer — Ryan · Plano | Remote
More like this: DevOps & SRE Jobs · Browse all jobs
Free ATS checker · How to Tailor Your Resume to a Job Description (Step by Step)