DevSecOps Engineer

📋 Job Overview

Peregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We are seeking a DevSecOps Engineer to build and run the cloud infrastructure and delivery pipelines that move federal systems into production, and keep them secure and automated.

🏢 About Peregrine

Peregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We work across the full lifecycle—from strategy and governance through architecture, engineering, analytics, AI, visualization, and training—for clients including the SEC, PCAOB, DDOT, and DCAA. Our clients describe our support as “absolutely excellent” and our people as “instrumental to organization’s success.” Winner of the United Nations COP27 Datathon, our work has earned all Exceptional CPARS ratings, SEC Chair’s Awards, the SEC Vision Award, and recognition from FDA leadership.

We are also built differently. Peregrine is the first and only social enterprise organized as a Benefit Corporation and SBA 8(a) company focused on AI and data for government. We believe business success should create client value, social value, and opportunity for our people.

As we enter our next stage of growth, we need dependable, motivated, and skilled people who have a combination of intellectual curiosity and intellectual courage. With new clients, larger programs, and expanding responsibilities, the people joining Peregrine now will have the opportunity to help shape the company we become.

People first. Ownership always.

We solve problems through people, process, and technology—in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation are the foundational pillars of delivery on which our skills stand. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else.

At Peregrine, you are not joining simply to fill a position. You are joining a team, taking ownership of a mission, and helping build a company. If that excites you, we should talk.

🎯 The Role

Your first project will likely have you owning assigned delivery pipelines and the environments beneath them. Depending on the assignment, you may:

• Build and maintain secure cloud-native infrastructure on Amazon Web Services (AWS), and the continuous integration and continuous delivery (CI/CD) pipelines that deploy to it.
• Define that infrastructure as code in Terraform or CloudFormation.
• Put static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), vulnerability scanning, and secrets management into the delivery path.
• Automate provisioning and releases with health checks and rollback built in, generate compliance evidence as part of each run, and script away repeatable operational work.
• Support Docker and Kubernetes workloads, and chase down infrastructure, networking, deployment, and security faults.
• Implement National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls, and keep continuous monitoring and authorization evidence current.
• Automate work in Python, with Bash where it fits, use artificial intelligence (AI)-assisted tools to speed it up, and raise the quality of what ships.

You deliver pipelines that enforce the required controls and produce the evidence a release review needs. You automate the manual steps out of the release path, and you build progressive delivery with automated health checks and rollback so that deploying stops being an event.

This is where you start, not the shape of your career here.

✅ Key Responsibilities

• Build and maintain secure cloud-native infrastructure on Amazon Web Services (AWS), and the continuous integration and continuous delivery (CI/CD) pipelines that deploy to it.
• Define infrastructure as code in Terraform or CloudFormation.
• Implement automated security testing (SAST, DAST, SCA), vulnerability scanning, and secrets management into the delivery path.
• Automate provisioning and releases with health checks and rollback built in.
• Support Docker and Kubernetes workloads.
• Implement NIST SP 800-53 controls and maintain continuous monitoring and authorization evidence.
• Automate work in Python and Bash.
• Deliver pipelines that enforce required controls and produce evidence for release reviews.
• Build progressive delivery with automated health checks and rollback.

📌 Required Qualifications

• 4+ years of experience in DevSecOps or platform engineering
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Hands-on experience building CI/CD pipelines with security gates, using AWS-native tools (CodePipeline, CodeBuild) or comparable tools (GitHub Actions, GitLab CI)
• Infrastructure as code with CloudFormation or Terraform, and hands-on Docker image creation and containerization
• Experience deploying Kubernetes clusters and managing them
• Automated security testing, such as SAST, DAST, and SCA, together with vulnerability scanning
• Python scripting and programming; Bash is a plus
• Proficient use of Linux operating systems and shell scripting
• A strong understanding of computer networks, routing, load balancing, application programming interfaces, and web application architectures
• Experience using AI-assisted development tools such as GitHub Copilot for code generation, review, and validation
• Version control with Git
• Experience with monitoring and logging
• Proficiency in writing, PowerPoint, and Excel

⭐ Desirable Experience

• Federal security experience that includes supporting Federal Information Security Modernization Act (FISMA) compliance, implementing NIST SP 800-53 controls, and providing Authority to Operate (ATO) support
• An AWS certification
• Experience managing secrets with HashiCorp Vault, AWS Secrets Manager, or a similar tool
• Experience in federal information technology

🎁 Benefits

This is a full-time W-2 position with a salary of $120,000 to $140,000 per year.

Benefits include medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) with an employer match of up to 4% of salary; unlimited paid time off; and sponsored professional certifications and continuing education.

🛂 Visa & Eligibility

The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.