Full Time

DevSecOps Engineer

Staffing Spot, Inc.
Contract
Mid-Senior level
IT Services and IT Consulting
York, PA
???* / year

Job Description

Role: DevSecOps Engineer

We're looking for a candidate who is a U.S. citizen and resides in the contiguous United States. You'll be a W-2 employee, and we do not accept third-party applications.

Key Responsibilities

  • Bachelor's degree in Computer Science or related field (or equivalent experience).
  • 7+ years of hands-on experience with DevSecOps in AI/ML or data-intensive systems.
  • Familiarity with OpenShift or Kubernetes security hardening.
  • Knowledge of Zero Trust Architecture (ZTA) concepts.
  • Proven experience managing and driving successful ATO processes.
  • Expertise with DevSecOps tools, practices, and frameworks.
  • Strong understanding of federal security compliance standards (e.g., NIST 800-53, RMF, FedRAMP)
  • Hands-on experience with cloud environments (AWS, Azure, or GCP) and containerization (Docker, Kubernetes).
  • Strong scripting and automation skills (Python, Bash, or similar).
  • Excellent leadership, communication, and documentation abilities.
  • Active security clearance or eligibility to obtain one
  • Design, implement, and maintain secure CI/CD pipelines.
  • Integrate security tools into DevOps workflows and automate security testing.
  • Perform vulnerability scanning, SAST, DAST, SCA, and container image scanning.
  • Implement Infrastructure as Code (IaC) security using Terraform, Checkov, or similar tools.
  • Hands-on experience with CI/CD pipeline development and automation.
  • Experience with container technologies including Docker, Podman, or CRI-O.
  • Experience with Kubernetes, OpenShift, or similar orchestration platforms.
  • Experience working within AWS cloud environments.
  • Proficiency in at least two programming or scripting languages such as Python, Java, Node.js, Go, .NET/C#, Bash, or PowerShell.
  • Secure cloud environments across AWS, Azure, or GCP.
  • Implement container and Kubernetes security best practices.
  • Manage secrets, certificates, encryption, and access controls.
  • Implement IAM, RBAC, least-privilege access, and policy-as-code.
  • Monitor security events, investigate vulnerabilities, and support remediation.
  • Collaborate with development, operations, and security teams to enforce compliance.
  • Support security standards and compliance requirements such as ISO 27001, SOC 2, and PCI DSS.

Skills: openshift,devsecops,ci/cd pipeline,kubernetes,devops,aws,docker,podman

Of the 33 countries of the Americas, the United States was the 9th lowest for unemployment in 2025, by the International Labour Organization’s estimates. Every country, ranked →

View Similar Jobs

Matches Jobs

Similar jobs which you may be interested in. Typically using your existing skillset.