DevSecOps Engineer (Remote)

A.C.Coy Company is seeking a DevSecOps Engineer to strengthen software development lifecycle by embedding security practices into every stage of delivery for their US Government client. This remote contract-to-hire position involves working across development, operations, and security teams to ensure secure and efficient application deployment.

Responsibilities:

• Working across development, operations, and security teams to ensure applications and infrastructure are secure, compliant, and resilient, while maintaining speed and efficiency in deployment
• Lead the evolution of the software delivery lifecycle by embedding security into every stage of the CI/CD pipeline
• Integrate existing automation frameworks with AI-based solutions to improve coverage, reliability, and efficiency
• Ensure that all AI scripts and programs are fully executable on postal-issued laptops within approved security and environment constraints
• Perform Static and Dynamic Application Security Testing (SAST/DAST), integrated into pipelines
• Collaborate with software developers and IT staff to oversee code releases and deployments
• Design and implement scalable cloud architecture using platforms such as AWS, Google Cloud Platform, or Azure
• Manage containerization technologies such as Docker and orchestration tools like Kubernetes
• Utilize Infrastructure as Code (IaC) tools like Ansible for automated provisioning of infrastructure
• Ensure system reliability through monitoring, logging, and alerting using tools like Jenkins and Git
• Develop RESTful APIs and microservices to facilitate communication between applications
• Maintain databases including MySQL, PostgreSQL, Oracle, and Microsoft SQL Server
• Participate in Agile development processes to improve software delivery cycles
• Troubleshoot issues across the application stack from front-end to back-end services
• Manage and secure cloud environments (AWS, Azure, GCP) and containerized workloads (Docker, Kubernetes)
• Implement Infrastructure as Code (IaC) with secure configurations using Terraform, Ansible, or CloudFormation
• Monitor and respond to security incidents, leveraging SIEM tools and observability platforms
• Ensure compliance with industry standards and regulations (ISO 27001, NIST, GDPR, HIPAA, PCI DSS)
• Provide training and guidance to teams on DevSecOps best practices

Requirements:

• Bachelor's degree in Computer Science, Cybersecurity, or related field
• 13+ years of overall IT experience
• 10+ years of experience managing software releases across DEV, SIT, CAT/UAT, and PROD environments, supporting major and minor releases, patches, upgrades, and production deployments
• 10+ years of experience providing release support, code promotion, deployment monitoring, and production data fixes to ensure application stability and successful software delivery
• 5+ years of experience designing, implementing, and maintaining secure CI/CD pipelines with integrated automated security testing and compliance controls
• 3+ years of experience leveraging GitHub Copilot and other AI-enabled tools to automate manual processes, improve developer productivity, and streamline software delivery workflows
• 3+ years of experience implementing and enforcing Secure Coding Standards throughout the software development lifecycle
• Strong knowledge of integrating application security testing tools, including SAST, DAST, and Software Composition Analysis (SCA), into CI/CD pipelines and development workflows
• Proven ability to collaborate with development teams to promote secure coding practices and remediate security vulnerabilities early in the SDLC
• Hands-on experience with Jenkins, GitLab CI/CD, Azure DevOps, and/or CircleCI to automate builds, deployments, testing, and embedded security validation
• Deep knowledge of cloud security services and best practices across AWS, Microsoft Azure, and Google Cloud Platform (GCP)
• Hands-on experience securing containerized applications and orchestration platforms, including Docker and Kubernetes
• Proficiency in Python and Java for developing automation scripts, security tooling, and CI/CD pipeline integrations
• Familiarity with Terraform, Ansible, or CloudFormation, with emphasis on secure configurations
• Excellent communication skills
• Be able to pass a drug screening, criminal history, and credit checks
• Must be a US Citizen or have permanent residence status (Green Card)
• Must be able to obtain a Position of Public Trust Clearance
• Must have lived in the United States for the past 5 years
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)