Senior DevSecOps Engineer

Peraton is a national security company and mission capability integrator serving government agencies and the U.S. armed forces. The Senior DevSecOps Engineer will lead DevSecOps and cloud transformation across AWS commercial and GovCloud environments by building secure, automated development and deployment processes. The role includes managing CI/CD pipelines, container platforms, cloud infrastructure, security compliance, observability, incident response, developer self-service, and technical leadership.

Responsibilities:

• Design and manage GitLab CI/CD pipelines using reusable templates, shared runners, feature flags, environment gates, and DORA metrics
• Automate SAST, DAST, SCA, and secrets scanning as required pipeline stages, with policy-based gates that prevent insecure builds from promotion
• Integrate container scanning, registry admission controls, and runtime protection using Aqua Security to enforce Kubernetes and CIS benchmarks
• Scan Terraform and Kubernetes configurations for security issues and remediate findings before deployment
• Lead Jenkins-to-GitLab CI/CD migrations and establish standardized pipeline patterns for application teams
• Operate containerized workloads on OpenShift (ROSA) and Amazon EKS across AWS Commercial and GovCloud, including Spring Boot and other microservices
• Automate AWS and Kubernetes infrastructure with Terraform and use Ansible/Ansible Tower for configuration management, hardening, and patching
• Engineer AWS services including EC2, VPC, IAM, S3, EBS, ELB/ALB/NLB, Route 53, and CloudWatch, using least-privilege IAM as the baseline
• Implement GitOps workflows so infrastructure, application, and cluster configurations are version-controlled, reviewable, and reproducible
• Build reusable Terraform modules and GitLab templates that allow application teams to provision namespaces, environments, and supporting AWS resources without platform-team tickets
• Design self-service onboarding workflows covering repository creation, CI/CD setup, RBAC and quotas, and security-gate enrollment
• Publish standardized GitLab pipeline templates and golden-path patterns so security, compliance, and observability are built in automatically
• Maintain onboarding documentation and module catalogs, and use adoption and onboarding metrics to identify and remove friction
• Implement and enforce STIG, CIS, and organizational security requirements across pipelines, platforms, and workloads
• Design and manage AWS and Kubernetes IAM, including RBAC, admission controls, pod security, network policies, and secrets management using AWS KMS and Secrets Manager
• Support vulnerability management, ATO and accreditation activities, audits, and continuous compliance reporting across FedRAMP and DoD environments
• Operate observability platforms including Datadog, Dynatrace, Splunk, OpenTelemetry, CloudWatch, and OpenSearch for metrics, logs, traces, dashboards, and alerting
• Lead critical incident response, including real-time diagnostics, stakeholder and executive communication, root-cause analysis, and corrective actions through resolution
• Facilitate cross-team root-cause reviews and drive resulting reliability improvements through implementation
• Lead transformation initiatives across AI, advanced analytics, and emerging technologies, translating strategy into actionable engineering roadmaps and technical responses to RFIs
• Establish engineering standards, review architecture, and mentor engineers across DevSecOps, cloud, security, and automation
• Identify and improve inefficient processes and actively participate in Agile delivery to evolve business processes and technology

Requirements:

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
• Bachelor's degree with 12 years of experience, a Master's degree with 10 years of experience, or a High School Diploma or equivalent and 16 years
• 8+ years of AWS experience covering networking, IT security tooling, and databases
• Hands-on technical expertise in DevSecOps, security automation, application development, integration, and release management
• Real-world experience establishing and maturing CI/CD toward progressive delivery
• Experience building self-service developer onboarding or platform-as-a-product capabilities using Terraform and GitLab
• Proven track record in senior technical or advisory roles, driving strategic change and digital adoption across business units
• Experience supporting FedRAMP, FISMA, or DoD-accredited cloud environments
• Leadership presence and communication skills to work with customers at all levels and manage communication during critical incidents
• AWS Certified Solutions Architect — Professional
• AWS Certified Security — Specialty
• Red Hat Certified Specialist in OpenShift Administration
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD)
• HashiCorp Certified: Terraform Associate; experience obtaining or maintaining an ATO in a FedRAMP High environment