DevSecOps Engineer
Phizenix
- Location
- Hybrid (Reston, Virginia)
- Employment
- Full-time
- Level
- Senior Level
About the Role
Phizenix is seeking a DevSecOps Engineer to build and secure cloud-native infrastructure and CI/CD pipelines. The role focuses on automating security controls and maintaining resilient architectures in compliance with NIST 800-53 standards.
Skills
Perks
- Hybrid Work
Full job details
The DevSecOps Engineer implements, automates, and maintains secure cloud infrastructure and CI/CD pipelines. You will build and manage infrastructure-as-code solutions, deploy and secure cloud environments, integrate security controls into development workflows, and drive DevSecOps best practices throughout the software development lifecycle. The ideal candidate has hands-on experience with AWS or Azure, containerization technologies, automation tools, and a strong commitment to improving security, scalability, reliability, and deployment efficiency.
Key Responsibilities:
- Build and maintain secure, NIST 800-53 compliant, resilient, and high-performing cloud-native infrastructure architectures.
- Assess cloud architectures and system designs for security vulnerabilities and implement appropriate remediation strategies.
- Develop and maintain security automation tools and scripts using programming languages such as Python.
- Implement and manage AWS or Azure environments, Docker containers, Kubernetes clusters, GitHub repositories, and dependency management solutions.
- Deploy cloud infrastructure, platform components, HTTP/TLS security configurations, and compliance assets using Terraform, Ansible, Docker, and related technologies.
- Automate routine operational and deployment tasks to improve scalability, consistency, and efficiency.
- Create and manage automated release processes and CI/CD pipelines utilizing Jenkins, Spinnaker, and similar tools.
- Develop and maintain Pipeline as Code (PaC) and Infrastructure as Code (IaC) solutions.
- Deploy and manage cloud resources through scripts, manifests, and automation frameworks.
- Troubleshoot and resolve infrastructure, network, security, and deployment-related issues.
- Utilize AI-assisted development tools, including GitHub Copilot, to generate, review, validate, and improve code and automation workflows.
Non-Technical Requirements:
- Must be a U.S. Citizen.
- Must be willing to work a HYRBID Schedule (2 Days) in Reston, VA & client locations in the Washington D.C. area as required.
- Ability to pass a 7-year background check and obtain/maintain a U.S. Government Clearance
- Strong communication and presentation skills.
- Must be able to prioritize and self-start.
- Must be adaptable/flexible as priorities shift.
- Must be enthusiastic and have passion for learning and constant improvement.
- Must be open to collaboration, feedback and client asks.
- Must enjoy working with a vibrant team of outgoing personalities.
Required Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
- 5+ years of experience in DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering.
- Proficiency with Linux operating systems and Shell/Bash scripting.
- Strong programming experience with Python.
- Hands-on experience building and operating systems and applications running on AWS or Azure cloud platforms.
- Experience creating Infrastructure as Code (IaC) using Terraform to deploy and manage applications and cloud infrastructure.
- Hands-on experience with Docker image creation and containerization technologies.
- Experience deploying and managing Kubernetes (K8s) clusters.
- Experience utilizing command-line interfaces (CLI) to automate and create repeatable processes.
- Experience creating Pipeline as Code solutions for complex CI/CD workflows and release automation.
- Experience securing cloud environments and integrating security controls into CI/CD pipelines.
- Experience working within large and complex computing environments.
- Strong understanding of computer networks, routing, load balancing, APIs, and web application architectures.
- Ability to troubleshoot and resolve infrastructure, security, and network-related issues.
- Strong interpersonal, communication, and presentation skills.
- Excellent time management skills with the ability to work within aggressive delivery schedules.
- Experience using AI-assisted development tools such as GitHub Copilot for code generation, review, validation, and workflow automation.
Preferred Qualifications:
- Experience with Terraform, Ansible, Jenkins, Spinnaker, and other DevOps automation platforms.
- Experience implementing NIST 800-53 security controls and compliance requirements.
- Experience building and securing enterprise cloud environments.
- Experience with container security, vulnerability management, and security automation tools.