Position Summary
The DevOps CI/CD Engineer – AWS (DevSecOps Champion) is a senior technical role supporting DOJ Homeland Security Task Force (HSTF) / National Coordination Center (NCC). This role leads secure CI/CD and DevSecOps practices for AWS-based solutions, designing and governing pipelines and automation that embed security, compliance, and risk management into the delivery lifecycle for mission‑critical systems.
Responsibilities
Define and enforce secure CI/CD and DevSecOps standards, patterns, and guardrails for AWS-hosted applications, in alignment with GDIT Cyber Security Policy, Cyber Security Handbook, and Cloud/Security standards.
Design, build, and maintain CI/CD pipelines (e.g., AWS CodePipeline/CodeBuild, Jenkins, GitLab CI, GitHub Actions, Azure DevOps) with integrated security scanning, compliance checks, approvals, and testing.
Lead infrastructure‑as‑code (IaC) implementations (CloudFormation, Terraform) with embedded security and configuration baselines, supporting secure provisioning of AWS environments.
Automate secure environment provisioning, configuration, and deployments across development, test, and production AWS accounts, in line with cyber and IT risk management requirements.
Implement monitoring, logging, and alerting (CloudWatch, CloudTrail, centralized logging) to support secure, observable, and auditable delivery pipelines.
Integrate identity and access management, encryption, secrets management, vulnerability scanning, and compliance controls into CI/CD workflows as part of DevSecOps practices.
Ensure CI/CD pipelines and AWS solutions comply with applicable contractual and regulatory requirements (e.g., NIST 800‑53/171, CMMC, FedRAMP, ISO 27001) and internal cyber standards.
Collaborate with application development, cloud platform, cyber security, IT risk, and operations teams to ensure architectures are “DevSecOps-ready” and align with secure development standards.
Provide technical leadership, coaching, and documentation for project teams adopting DevSecOps and secure CI/CD practices; develop reusable secure pipeline templates and patterns.
Support proposals, technical reviews, and risk assessments where secure CI/CD, cloud security, and DevSecOps capabilities are required, including input to labor category mapping and staffing.
Basic Qualifications
