10+ years of experience managing software releases across DEV, SIT, CAT/UAT, and PROD environments, supporting major and minor releases, patches, upgrades, and production deployments. 3+ years of experience leveraging GitHub Copilot and other AI-enabled tools to automate manual processes, improve developer productivity, and streamline software delivery workflows.
Numbers & Facts
Location
Falls Church, Virginia (Remote)
Description
Overview:
Tier One Technologies is seeking a DevSecOps Engineer to strengthen software development lifecycle by embedding security practices into every stage of delivery for our US Government client.
This remote contract-to-hire position will be originated in Falls Church, VA.
SELECTED CANDIDATES WITHOUT REQUIRED CLEARANCE WILL BE SUBJECT TO A FEDERAL GOVERNMENT BACKGROUND INVESTIGATION TO RECEIVE IT.
Responsibilities:
Working across development, operations, and security teams to ensure applications and infrastructure are secure, compliant, and resilient, while maintaining speed and efficiency in deployment.
Lead the evolution of the software delivery lifecycle by embedding security into every stage of the CI/CD pipeline.
Integrate existing automation frameworks with AI-based solutions to improve coverage, reliability, and efficiency.
Ensure that all AI scripts and programs are fully executable on postal-issued laptops within approved security and environment constraints.
Perform Static and Dynamic Application Security Testing (SAST/DAST), integrated into pipelines.
Collaborate with software developers and IT staff to oversee code releases and deployments.
Design and implement scalable cloud architecture using platforms such as AWS, Google Cloud Platform, or Azure.
Manage containerization technologies such as Docker and orchestration tools like Kubernetes.
Utilize Infrastructure as Code (IaC) tools like Ansible for automated provisioning of infrastructure.
Ensure system reliability through monitoring, logging, and alerting using tools like Jenkins and Git.
Develop RESTful APIs and microservices to facilitate communication between applications.
Maintain databases including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server.
Participate in Agile development processes to improve software delivery cycles.
Troubleshoot issues across the application stack from front-end to back-end services.
Manage and secure cloud environments (AWS, Azure, GCP) and containerized workloads (Docker, Kubernetes).
Implement Infrastructure as Code (IaC) with secure configurations using Terraform, Ansible, or CloudFormation.
Monitor and respond to security incidents, leveraging SIEM tools and observability platforms.
Ensure compliance with industry standards and regulations (ISO 27001, NIST, GDPR, HIPAA, PCI DSS).
Provide training and guidance to teams on DevSecOps best practices.
Qualifications:
Bachelor’s degree in Computer Science, Cybersecurity, or related field.
13+ years of overall IT experience.
10+ years of experience managing software releases across DEV, SIT, CAT/UAT, and PROD environments, supporting major and minor releases, patches, upgrades, and production deployments.
10+ years of experience providing release support, code promotion, deployment monitoring, and production data fixes to ensure application stability and successful software delivery.
5+ years of experience designing, implementing, and maintaining secure CI/CD pipelines with integrated automated security testing and compliance controls.
3+ years of experience leveraging GitHub Copilot and other AI-enabled tools to automate manual processes, improve developer productivity, and streamline software delivery workflows.
3+ years of experience implementing and enforcing Secure Coding Standards throughout the software development lifecycle.
Strong knowledge of integrating application security testing tools, including SAST, DAST, and Software Composition Analysis (SCA), into CI/CD pipelines and development workflows.
Proven ability to collaborate with development teams to promote secure coding practices and remediate security vulnerabilities early in the SDLC.
Hands-on experience with Jenkins, GitLab CI/CD, Azure DevOps, and/or CircleCI to automate builds, deployments, testing, and embedded security validation.
Deep knowledge of cloud security services and best practices across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
Hands-on experience securing containerized applications and orchestration platforms, including Docker and Kubernetes.
Proficiency in Python and Java for developing automation scripts, security tooling, and CI/CD pipeline integrations.
Familiarity with Terraform, Ansible, or CloudFormation, with emphasis on secure configurations.
Excellent communication skills.
Be able to pass a drug screening, criminal history, and credit checks.
Must be a US Citizen or have permanent residence status (Green Card).
Must be able to obtain a Position of Public Trust Clearance.
Must have lived in the United States for the past 5 years.
Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)