AI Summary
Build and operate CI/CD security pipelines with SAST, DAST, SCA, container scanning, SBOM, and secrets management. Develop automated evidence collectors in Python/boto3, serverless functions, or Go to map cloud and scanner data to NIST SP 800-53 controls. Establish source-control governance, identity workflows, and event-driven integrations for federal cATO programs.
Key Highlights
CI/CD security pipeline engineering with SAST, DAST, SCA, container scanning, SBOM, and secrets management
Automated evidence collectors mapping cloud/scanner data to NIST SP 800-53 security controls
Identity and secrets management using HashiCorp Vault and AWS Secrets Manager
Key Responsibilities
Build and operate CI/CD security pipeline integrated across source, build, test, release, deploy, and runtime
Write evidence collectors in Python/boto3, serverless functions, or Go to pull cloud, scanner, and SIEM data and map it to security controls
Establish review gates and attestation formats for source-control governance
Build and maintain API/connector integrations and event-driven data flows feeding the evidence and GRC layer
Engineer identity, PKI, and secrets workflows supporting control evidence
Technical Skills Required
Benefits & Perks
Remote work
Annual salary $145,000-$175,000
Nice to Have
SBOM generation
Container signing
Job Description
DevSecOps & Evidence-Automation Engineer
Position Overview
We are looking for a highly talented, technical, hands-on DevSecOps & Evidence-Automation Engineer to help accelerate our growing Professional Services business within the Government Sector. This is a 100% remote position. You will build the CI/CD security pipeline and the automated evidence collectors that shift a federal continuous Authorization to Operate (cATO) program from periodic, manual evidence collection to near-real-time, machine-generated control evidence.
Duties & Responsibilities
- CI/CD Security Pipeline: Build and operate a pipeline (SAST, DAST, SCA, container scanning, SBOM, secrets) integrated across source, build, test, release, deploy, and runtime.
- Evidence Automation: Write evidence collectors (Python/boto3, serverless functions, Go) that pull cloud, scanner, and SIEM data and map it to security controls (NIST SP 800-53).
- Source-Control Governance: Establish review gates and attestation formats.
- Integration: Build and maintain API/connector integrations and event-driven data flows feeding the evidence and GRC layer.
- Identity & Secrets: Engineer identity, PKI, and secrets workflows (HashiCorp Vault, AWS Secrets Manager) supporting control evidence.
- High level of attention to detail, needs minimal guidance, effective verbal and written communication.
- 7+ years building cloud-native, event-driven services and automation on AWS (serverless, Terraform/IaC, Docker).
- Strong in Go and/or Java (Spring Boot); Apache Kafka or equivalent event streaming.
- CI/CD pipeline engineering (Jenkins/GitHub Actions) and infrastructure-as-code.
- PKI/X.509 and secrets-management engineering (HashiCorp Vault, AWS Secrets Manager).
- Ability to map technical evidence to security controls (NIST SP 800-53).
- SBOM generation and container signing a plus.
Interested in remote work opportunities in Devops? Discover Devops Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
- Bachelor of Science (or higher) in computer engineering, computer science, information technology, cyber security, or a related field.
- Another major will be considered, provided it clearly addresses at least one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems, or information technology.
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
- No Clerance required, but an active Secret Clearance is preferred.
- Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.
- 6:00 am ET – 6:00 pm ET
- $145,000-$175,000
- Ability to pass a minimum background investigation.
Similar Jobs
Explore other opportunities that match your interests
Senior Automation Engineer
••••••
••••••
••••••
Job Type
••••••
Experience Level
••••••
CrowdStrike
United State
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Not Applicable
children's hospital los angele...
United State
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Not Applicable
PrizePicks
United State