DevSecOps Engineer at INADEV

Reston, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

19 Jun, 26

Salary

150000.0

Posted On

21 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

AWS CloudFormation, NIST 800 53, Zero Trust Architecture, Infrastructure as Code, High Availability, Disaster Recovery, CI/CD Pipelines, Docker, Kubernetes, Python, Java, Bash Scripting, AI Assisted Engineering, Security Assessments, Linux/Unix

Industry

Description

Description *****TO BE CONSIDERED, CANDIDATES MUST BE U.S. CITIZENS AND LOCATED IN THE D.C. METRO AREA***** *****THIS POSITION IS A W2 FULL TIME/PERMANENT ROLE. CORP-TO-CORP/INDEPENDENT CONSULTANTS WILL NOT BE CONSIDERED***** Inadev is focused on its founding principle to build innovative customer-centric solutions incredibly fast, secure, and at scale. We deliver world-class digital experiences to some of the largest federal agencies and commercial companies. Our technical expertise and innovations are comprised of codeless automation, identity intelligence, immersive technology, artificial intelligence/machine learning (AI/ML), virtualization, and digital transformation. POSITION DESCRIPTION: We are seeking a skilled DevSecOps Engineer to design, build, secure, and operate cloud infrastructure supporting mission critical applications in AWS. The ideal candidate will have strong hands-on experience building AWS infrastructure using CloudFormation, implementing NIST 800 53 security controls, applying Zero Trust Architecture (ZTA) principles, and supporting highly available systems with stringent uptime and recovery requirements. This role focuses on hands-on implementation of secure, resilient cloud platforms while collaborating with senior engineers, security teams, and application developers. The DevSecOps Engineer will also leverage AI assisted engineering tools to improve delivery efficiency while ensuring security, compliance, and operational reliability. RESPONSIBILITES: Cloud Infrastructure & Automation Build and maintain AWS cloud infrastructure using Infrastructure as Code (IaC), with an emphasis on AWS CloudFormation. Implement scalable and resilient cloud architectures following established reference designs and best practices. Support high availability architectures leveraging AWS services such as load balancing, auto scaling, and multi AZ configurations. Automate infrastructure provisioning, configuration, and maintenance to improve consistency and reliability. Security & Compliance (DevSecOps) Implement and maintain NIST 800 53 security controls across cloud infrastructure, CI/CD pipelines, and deployed workloads. Apply Zero Trust Architecture (ZTA) principles under established security architectures, including identity centric access and least privilege enforcement. Integrate security tooling into CI/CD pipelines (e.g., SAST, DAST, dependency scanning, container scanning). Participate in security assessments, remediation activities, and compliance validation efforts. Assist senior engineers and security teams during audit and ATO related activities. High Availability & Disaster Recovery Support systems designed to achieve high availability and defined uptime SLAs. Implement backup, replication, and recovery mechanisms aligned with DR strategies. Participate in Disaster Recovery (DR) exercises and failover tests, validating RTO and RPO requirements. Assist in identifying and remediating resiliency gaps in platform and application infrastructure. CI/CD & Platform Engineering Build and maintain CI/CD pipelines as code using tools such as Jenkins, GitHub Actions, or similar platforms. Automate deployment workflows with embedded security and quality gates. Support containerized workloads using Docker and Kubernetes, including cluster deployment and configuration. Develop automation scripts and tooling using Python, Java, or Bash. Collaborate with application teams to enable efficient and secure deployments. PHYSICAL DEMANDS: Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions Inadev Corporation does not discriminate against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, sexual orientation/gender identity, or national origin. INTEGRITY AND COMPLIANCE NOTICE: All information provided by applicants must be complete, truthful, and accurate. Any intentional misrepresentation of skills, experience, credentials, or identity may result in removal from consideration for this and future employment opportunities. For positions supporting U.S. federal government contracts, applicants may be subject to background investigations and employment eligibility verification in accordance with federal regulations. Providing false information during this process may be subject to review and action as required under applicable federal laws and security regulations. Inadev is proud to be an Equal Opportunity Employer and a federal contractor committed to compliance with all applicable EEO, OFCCP, and federal hiring standards. Requirements NON-TECHNICAL REQUIREMENTS: Must be a U.S. Citizen. Must be willing to work a HYRBID Schedule (3 Days) in Reston, VA & client locations in Washington D.C. metro area as required. Ability to pass a 7-year background check and obtain/maintain a U.S. Government Clearance (active Federal Government Public Trust clearance preferred). Strong communication and collaboration skills. Ability to prioritize tasks and work effectively in a team environment. Motivation for continuous learning and skill development. MANDATORY REQUIREMENTS/SKILLS: Must possess a Bachelor’s degree in Computer Science, Engineering, or related technical discipline. Must have at least 5 years of experience in DevOps, DevSecOps, or cloud platform engineering roles. Must possess professional hands-on experience with: AWS cloud services, AWS CloudFormation, Infrastructure as Code (IaC) concepts and implementation Must possess professional hands-on experience implementing or supporting NIST 800 53 security controls. Must have working knowledge of Zero Trust Architecture (ZTA) principles. Must possess professional hands-on experience supporting high availability systems. Must have familiarity with Disaster Recovery concepts, backup strategies, and recovery testing. Must possess professional hands-on experience using AI assisted development tools in a professional environment. Must have strong Linux/Unix and Shell/Bash scripting skills. Must possess professional hands-on experience programming in Python and/or Java. Must possess professional hands-on experience with Docker and Kubernetes fundamentals. Must have a solid technical understanding of networking concepts, load balancing, and APIs. Must have the ability to troubleshoot infrastructure, deployment, and security issues. AI ASSISTED ENGINEERING & CODE GENERATION: Hands on experience using AI assisted code generation tools (e.g., GitHub Copilot) to support: Development of CloudFormation templates and IaC modules, CI/CD pipeline definitions, Automation and operational scripts Ability to review and refine AI generated code to ensure it meets: Secure coding standards and Organizational and federal security requirements Experience incorporating AI assisted development into day to day DevSecOps workflows while following Secure SDLC practices. Awareness of risks associated with AI generated code and adherence to established review and validation processes. DESIRED REQUIREMENTS/SKILLS: Experience supporting federal government or regulated systems. Familiarity with ATO documentation and security processes (SSPs, POA&Ms). Experience working in environments with defined uptime and recovery SLAs. Exposure to monitoring and observability tools. AWS Certifications (Associate or Professional level) are a plus.

Responsibilities

The DevSecOps Engineer will be responsible for building, securing, and operating cloud infrastructure in AWS using Infrastructure as Code, focusing on implementing NIST 800 53 controls and Zero Trust Architecture principles. Key duties include automating infrastructure provisioning, integrating security tooling into CI/CD pipelines, and supporting high availability and disaster recovery mechanisms.