DevSecOps and Automation Subject Matter Expert

Overview/ Job Responsibilities

We are seeking a highly skilled and knowledgeable DevSecOps and Automation Subject Matter Expert to join our team and lead our Infrastructure as Code (IaC) and AWS automation team. In this role, you will be responsible for designing, securing, automating, and scaling cloud infrastructure using modern DevSecOps practices. The ideal candidate is an expert in AWS, IaC frameworks, CI/CD automation, and security-by-design, with strong leadership capabilities to guide a team of engineers in delivering reliable, compliant, and high-performing cloud platforms.

 

Responsibilities:

• Lead and mentor the IaC engineering team, setting technical direction, best practices, and coding standards for infrastructure automation.
• Collaborate with cross-functional teams, including software developers, infrastructure engineers, security officers, and project managers, to gather requirements and provide technical guidance.
• Design, develop, and implement a scalable and secure DevSecOps infrastructure, including CI/CD pipelines, version control systems, and automated testing frameworks.

• Collaborate with application teams, security teams, and platform engineering to deliver secure, scalable cloud solutions aligned with business needs.

• Monitor and improve system reliability, including logging, observability, alerting, patching, and disaster recovery automation.

• Establish and maintain secure cloud environments (e.g., AWS, Azure, or GCP) that comply with federal security standards (e.g., FISMA, FedRAMP).
• Implement automated deployment and configuration management processes, leveraging infrastructure-as-code (e.g., Terraform, CloudFormation, Ansible) and containerization technologies (e.g., Docker, Kubernetes).
• Develop and enforce best practices and standards for code quality, application security, and performance optimization, ensuring adherence to federal guidelines and compliance requirements.
• Collaborate with security officers to identify and implement appropriate security controls, automated security scans, and vulnerability assessments throughout the development lifecycle.
• Provide subject matter expertise in DevOps and automation, influencing the adoption of DevSecOps practices.
• Conduct training sessions and workshops to educate and empower development teams in the use of DevSecOps tools and methodologies.
• Monitor the performance and health of the infrastructure, applying necessary patches, upgrades, and optimizations to ensure high availability and minimal downtime.
• Continuously evaluate new tools and technologies in the DevSecOps space, proposing enhancements to existing systems, methodologies, and processes.
• Develop and maintain comprehensive documentation on the DevSecOps infrastructure, processes, and configurations.
• Stay up to date with emerging trends and industry best practices in DevSecOps, cloud computing, and automation, applying this knowledge to drive innovation and improvement.
• Work closely with the federal client's IT staff, security personnel, and other stakeholders to understand their specific requirements, address their concerns, and resolve technical challenges.

Minimum Qualifications

• Bachelor's degree in computer science, software engineering, or a related field. Equivalent experience will also be considered.
• Proven experience as a DevOps Engineer, Automation Engineer, or similar role, preferably in a federal or government contracting environment.
• Advanced proficiency in Infrastructure as Code tools such as Terraform, CloudFormation, or AWS CDK.
• Strong hands-on expertise with AWS services (EC2, VPC, IAM, Lambda, ECS/EKS, RDS, S3, CloudWatch, etc.).
• Strong proficiency with relevant DevSecOps tools and technologies, such as CI/CD pipelines (e.g., Jenkins, GitLab), version control systems (e.g., Git), configuration management tools (e.g., Terraform, Ansible), and containerization platforms (e.g., Docker, Kubernetes).
• Expertise in designing, implementing, and maintaining cloud environments with a focus on security and compliance using platforms like AWS, Azure, or GCP.
• In-depth understanding of federal security guidelines and compliance standards (e.g., FISMA, FedRAMP) and experience deploying software solutions adhering to these standards.
• Solid knowledge of security scanning tools (e.g., SonarQube, Fortify, OWASP Dependency Check) and vulnerability assessment practices.
• Strong scripting and automation skills (e.g., Bash, Python, PowerShell) to streamline and automate manual tasks and processes.
• Familiarity with Agile/Scrum development methodologies and experience working within an Agile team.
• Excellent communication and collaboration skills, with the ability to effec