DevSecOps Engineer – Mid-Level

Nationwide IT Services is seeking a Mid-Level DevSecOps Engineer to support secure infrastructure automation and software delivery for a federal customer. The engineer will extend the customer’s existing DevSecOps environment using approved tools and established standards, focusing on infrastructure as code, configuration automation, CI/CD security, and container delivery.

Responsibilities:

• Develop and maintain infrastructure as code using Terraform and OpenTofu
• Support modular IaC configurations, remote state management, and change-controlled deployments
• Build and maintain Ansible playbooks and roles, including secure secrets handling with Ansible Vault
• Implement and support GitHub Actions CI/CD pipelines with embedded security gates
• Integrate SAST, IaC scanning, secrets scanning, and policy-as-code checks into delivery pipelines
• Harden Docker images and support Kubernetes manifests and Helm charts
• Perform container image scanning and remediation using tools such as Trivy or Grype
• Align security implementation with CIS benchmarks and NIST SP 800-53, 800-171, and 800-207 control families
• Support secure automation practices across infrastructure, application delivery, and container environments
• Work within existing customer-approved standards, processes, and tools

Requirements:

• Mid-level hands-on experience with Terraform and/or OpenTofu
• Experience building and maintaining Ansible playbooks and roles
• Experience with GitHub Actions CI/CD pipelines
• Familiarity with embedded security gates, including:
• SAST tools such as Semgrep
• IaC scanning tools such as Checkov or tfsec
• Secrets scanning tools such as Gitleaks
• Policy-as-code using OPA/Rego
• Experience with Docker image hardening
• Experience with Kubernetes manifests and Helm
• Experience with container image scanning tools such as Trivy or Grype
• Knowledge of CIS benchmarks and NIST security controls
• Bachelor's degree in Information Technology, Computer Science, or equivalent experience
• Federal government or FedRAMP experience
• AWS experience
• HashiCorp Vault experience
• Python and/or Bash scripting experience