DevSecOps Engineer (Cloud)

ICF is hiring a DevSecOps Engineer (Cloud) to automate provisioning, configuration, security, and releases for Summit cloud environments and customer workspaces. The role develops infrastructure-as-code, CI/CD pipelines, secure configuration, secrets integration, and release automation, working with cross-functional teams to ensure changes are auditable, resilient, and aligned with VA standards.

Responsibilities:

• Builds and maintains the automation that provisions, configures, secures, and releases Summit cloud environments and customer workspaces
• Develops infrastructure-as-code, CI/CD pipelines, secure configuration patterns, secrets integration, release automation, and deployment evidence needed for traceable change
• Works with security, architecture, SRE, and QA personnel to ensure changes are peer-reviewed, auditable, resilient, and aligned to VA standards
• Apply Infrastructure-as-code, CI/CD, Azure/GovCloud, Git, automated provisioning, secrets management, vulnerability remediation, and release automation to support role delivery
• Collaborate with relevant product, engineering, security, governance, quality, and customer-facing stakeholders as required by the role
• Document work products, decisions, risks, and delivery evidence to support traceability and continuous improvement

Requirements:

• U.S. Citizenship is required due to federal contract requirements
• Candidate must reside in the U.S., be authorized to work in the U.S
• Candidate must have lived in the U.S. for three (3) full years out of the last five (5) years
• Bachelor's degree in Computer Science, Software Engineering, Cloud Engineering, Information Systems, DevOps, Cybersecurity, or related field; or a high school diploma with four (4) additional years of relevant experience in lieu of a bachelor's degree
• Minimum 6 years of relevant experience aligned to the responsibilities of this role
• Masters degree may substitute for two (2) years of relevant experience
• Highly effective analytical, problem-solving, and decision-making capabilities
• Excellent written and verbal communication skills, with the ability to work effectively across technical and non-technical audiences
• Strong organization, attention to detail, and the ability to prioritize and manage multiple responsibilities
• Collaborative approach with a commitment to quality, accountability, and continuous improvement
• Experience designing, implementing, and operating DevSecOps practices for large-scale cloud platforms, data platforms, analytics ecosystems, or enterprise modernization initiatives
• Deep experience with Terraform Infrastructure-as-Code (IaC) including reusable modules, environment templating, policy enforcement, automated provisioning, state management, and enterprise-scale cloud deployments
• Hands-on experience deploying, configuring, securing, and maintaining Databricks environments using Terraform, CI/CD pipelines, APIs, and automation frameworks
• Experience implementing DevSecOps capabilities across Azure Government, Azure Commercial, AWS GovCloud, and hybrid-cloud environments
• Experience developing and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Git, and modern release automation frameworks
• Experience provisioning and managing Azure resources including networking, storage, compute, identity services, analytics services, and platform resources through Infrastructure as Code
• Experience automating deployment and configuration of Databricks Workspaces, Unity Catalog, access controls, compute policies, notebooks, jobs, clusters, and governance controls
• Experience implementing secrets management, certificate management, key rotation, and secure credential handling using Azure Key Vault, HashiCorp Vault, or comparable enterprise solutions
• Experience integrating automated security controls into CI/CD pipelines including vulnerability scanning, static analysis, dependency analysis, container scanning, policy validation, and compliance checking
• Experience implementing Policy as Code, configuration management, infrastructure compliance validation, and automated governance controls
• Experience supporting deployment automation for data engineering, analytics, reporting, AI/ML, and enterprise application workloads
• Experience supporting MLOps, DataOps, and platform engineering practices including automated deployment, environment promotion, release validation, rollback strategies, and operational readiness
• Experience implementing logging, monitoring, observability, release evidence capture, deployment auditing, and operational telemetry solutions
• Strong experience with scripting and automation using Python, PowerShell, Bash, REST APIs, and cloud-native automation frameworks
• Experience working with identity and access management solutions including Microsoft Entra ID (Azure AD), RBAC, service principals, managed identities, and federated authentication models
• Experience supporting secure cloud architectures aligned with Zero Trust principles, NIST 800-53, RMF, FedRAMP, FIPS, and Federal cybersecurity requirements
• Experience collaborating with Architects, Security Engineers, Platform Engineers, SRE teams, QA teams, and Government stakeholders to ensure secure, auditable, and repeatable deployments
• Experience supporting Federal government, healthcare, or other highly regulated environments preferred
• Experience working in Agile, Scrum, SAFe, or cross-functional engineering teams