DevSecOps Engineer

Job Title: DevSecOps Engineer

Location: Washington, DC

Employment Type: Contract

About Us:

DMV IT Service LLC is a trusted IT consulting firm, established in 2020. We specialize in optimizing IT infrastructure, providing expert guidance, and supporting workforce needs with top-tier staffing services. Our expertise spans system administration, cybersecurity, networking, and IT operations. We empower our clients to achieve their technology goals with a client-focused approach that includes online training and job placements, fostering long-term IT success.

Job Purpose:

We are looking for a proficient DevSecOps Engineer to join a key client’s team in Washington, DC. This position focuses on creating secure, scalable, and efficient CI/CD pipelines with strong automation, integration of security tools, and developer enablement. The ideal candidate will bring extensive experience in DevOps methodologies, scripting, GitHub Actions, and working within regulated environments like FedRAMP and HIPAA. This role is essential for embedding security into the software delivery lifecycle and driving operational excellence across multiple teams.

Requirements

Key Responsibilities:

• Design, develop, and maintain secure CI/CD pipelines utilizing GitHub Actions and Jenkins, supporting deployment strategies such as canary releases, blue-green deployments, and rollback capabilities.
• Migrate existing Checkmarx scanning processes into GitHub Actions workflows.
• Create reusable automation workflows and scripts using languages like Python, Go, or Bash.
• Integrate security scanning tools, including SAST, DAST, SBOM generation, and secrets detection, directly into deployment pipelines.
• Implement policy-as-code to enforce security policies throughout the CI/CD lifecycle.
• Develop internal enablement tools, reusable playbooks, and self-service platforms to enhance developer productivity and operational consistency.
• Support GitOps methodologies and maintain strong proficiency with Git branching and workflow strategies.
• Produce and maintain documentation and tooling to encourage secure, consistent, and efficient operational practices.
• Ensure all processes comply with regulatory requirements such as FedRAMP, PCI DSS, and HIPAA.
• Work closely with cross-functional teams to scale security automation and improve the overall security posture of the software delivery process.