DevSecOps Engineer Role

📋 Job Overview

OPEN Data Jobs (ODJ) is built to craft data careers. We connect high-potential data, AI, and software professionals with meaningful work on the cutting edge of the federal sector, and our aim reaches beyond any single opening: to help you understand your strengths, find the right role, and grow throughout your career.

🏢 About OPEN Data Jobs

ODJ is organized around Roles and Openings. A Role is a durable career type, such as Data Engineer or AI Engineer: it describes the work, the skills that count, and where the path can lead. An Opening is a specific position hiring right now, with a level, a location, and an application. Roles help you see where you fit; from there, there is more than one way to move.

🎯 The Role

DevSecOps Engineers make secure delivery repeatable. They design the CI/CD paths, deployment controls, and operational feedback loops that carry software from a change in source code to a running service. In federal environments, that work also includes assembling and maintaining security evidence for an Authority to Operate (ATO), the formal decision to allow a system to operate at an accepted level of risk.

✅ Key Responsibilities

• CI/CD pipelines that run tests, security checks, approvals, and deployments consistently.
• Infrastructure-as-code modules and deployment patterns that are versioned and reviewable.
• Container build, image-scanning, and release processes for application workloads.
• Observability and vulnerability-management workflows that turn operating signals into action.
• Control evidence and traceability that support authorization, assessment, and continuous monitoring.

📌 Required Qualifications

• Hands-on experience with source control, automated testing, CI/CD, and deployment automation.
• Infrastructure-as-code experience with tools such as Terraform, Amazon Web Services CloudFormation, or comparable platforms.
• Working knowledge of container security, software supply-chain controls, and vulnerability remediation.
• Experience with logging, monitoring, incident response, and recovery practices.
• Ability to translate National Institute of Standards and Technology (NIST) Special Publication 800-53 control expectations into engineering work and evidence.

🎁 Benefits

Compensation, benefits, work location, and employment terms are set for each specific opening and will be stated with that opening.

🛂 Visa & Eligibility

Some openings may ask for experience supporting an ATO or working with the Risk Management Framework, a structured NIST process for managing security risk. Openings with production accountability may require demonstrated work with on-call operations, incident response, security assessments, or regulated release controls.