Job Title: DevSecOps Engineer, Senior
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: None
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None
The Opportunity
We are seeking a DevSecOps Engineer to support the secure development, integration, deployment, and maintenance of AI-enabled applications and services to support the United States Secret Service (USSS) contract supporting the Department of Homeland Security. The engineer will embed security practices throughout the software development lifecycle and help the team deliver repeatable, automated deployment processes for cloud-based AI solutions.
Working with AI engineers, software developers, cybersecurity, cloud, and operations teams, the DevSecOps Engineer will build and maintain CI/CD pipelines, automate security testing, and implement secure infrastructure and deployment patterns. The role will help ensure that application code, cloud resources, containers, APIs, and AI-related data flows meet enterprise security requirements while enabling the team to deliver updates efficiently.
Hybrid work schedule 2-3 days on site.
Responsibilities
- Build, maintain, and improve CI/CD pipelines for AI and software applications.
- Integrate security checks into development and deployment workflows, including code, dependency, container, and infrastructure scanning.
- Automate infrastructure provisioning and configuration using infrastructure as code.
- Implement secure deployment patterns for cloud-hosted applications, APIs, containers, and AI services.
- Apply security controls for identity and access management, secrets, encryption, network boundaries, and least-privilege access.
- Work with AI engineers to protect prompts, model endpoints, retrieval pipelines, training or reference data, and connected tools from unauthorized access or exposure.
- Support containerization and orchestration using technologies such as Docker and Kubernetes, where applicable.
- Establish and maintain artifact management, configuration management, release controls, and deployment documentation.
- Identify vulnerabilities and misconfigurations; coordinate remediation with engineering and cybersecurity teams.
- Support security assessments, authorization activities, audits, and compliance evidence collection.
- Monitor pipeline and deployment issues, troubleshoot failures, and improve automation and developer workflows.
- Document DevSecOps processes, security controls, pipeline configurations, and operational procedures.
- Contribute reusable components, technical documentation, and engineering practices that improve consistency and maintainability.
Show the full description
Qualifications
- Required:
- Bachelor's degree + 7 years of experience in artificial intelligence, machine learning, software engineering, or related field; equivalencies considered (Master's + 7 years; 16 years with no degree; AA + 12 years)
- Ability to obtain Public Trust clearance.
- At least five years of experience in DevSecOps, cloud engineering, software development, cybersecurity engineering, or a related field.
- Demonstrated experience building or maintaining CI/CD pipelines and automating software build, test, and deployment processes.
- Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation.
- Experience with cloud security controls, including identity and access management, secrets management, encryption, and network security.
- Experience integrating automated security testing into software delivery workflows, including vulnerability, dependency, and container scanning.
- Experience with source control and pipeline platforms such as GitHub Actions, Azure DevOps, or GitLab CI/CD.
- Familiarity with containers and container security, including Docker and Kubernetes.
- Understanding of secure software development practices and common application security risks.
