Back to Jobs

Mid-Level DevSecOps Engineer

Not Disclosed

Job Description & Details

This is a heavy-duty cleared DevSecOps role based 100% onsite in Gaithersburg, MD, requiring an active Top Secret/SCI with polygraph. You are going to be building secure pipelines and hardening cloud infrastructure where zero-trust and compliance aren't just buzzwords, they are hard prerequisites for every commit.

What You'll Actually Be Doing

You will spend your days bridging the gap between dev and security teams by building and maintaining automated CI/CD pipelines in GitLab or Jenkins. Expect to spend a lot of time writing Infrastructure as Code using Terraform or CloudFormation, orchestrating workloads across AWS ECS and Kubernetes, and embedding automated vulnerability scanning directly into the deployment workflow without slowing developers down too much.

The Core Tech Stack

You need deep, hands-on fluency in AWS, particularly with AWS CDK and ECS, alongside rock-solid container management using Docker and Kubernetes. Infrastructure automation with Terraform and scripting chops in Python, Bash, or PowerShell are non-negotiable because you will be expected to spin up environments and automate away manual toil on day one.

Interview Expectations

Expect the interview panel to drill you on state management bottlenecks and drift detection in Terraform, especially when managing complex multi-account AWS environments. They are going to ask you to whiteboard a secure CI/CD pipeline from scratch, specifically wanting to hear how you integrate security gates and container vulnerability scanning early in the cycle without breaking the deployment flow.

Application Advice

Your resume needs to heavily feature your cloud and pipeline metrics, making sure your AWS, Terraform, and GitLab CI/CD keywords jump off the page to clear the ATS. Explicitly state your level of hands-on experience with containerization and security hardening, and clearly outline your active clearance status right at the top so recruiters can fast-track your profile.