DevSecOps Engineer (Part-Time)

TechSur is seeking a DevSecOps Engineer to build the automated pipelines behind a federal customer's multi-cloud platform. This is a part-time (0.5 FTE, about 20 hours per week) role. You will develop CI/CD pipelines that provision infrastructure and deploy applications consistently across AWS, Azure, Google Cloud, and Oracle Cloud, with security testing built into every stage.

Responsibilities

• Working closely with cloud engineers, security specialists, and customer development and operations teams, you will make Infrastructure-as-Code the standard way environments are built and changed.
• You will also help the team ship faster without giving up control or compliance.
• Design, build, and maintain multi-stage CI/CD pipelines (build, test, scan, deploy) for infrastructure and customer applications.
• SAST (SonarQube, Checkmarx), software composition analysis (Snyk, Black Duck), DAST (OWASP ZAP), and container scanning (Trivy, Aqua), with gates that fail builds on high-severity findings.
• Implement GitOps practices (e.g., Argo CD) and policy-as-code checks (OPA/Rego, Checkov) to prevent configuration and IaC drift.
• Set up blue-green and canary deployment strategies with automated health checks and rollback.
• Use CSP-native DevOps services (AWS CodePipeline/CodeDeploy, Azure DevOps, GCP Cloud Build/Cloud Deploy, OCI DevOps) alongside third-party tools.
• Integrate pipelines with ServiceNow to automate change requests and risk-based approvals.
• Document pipeline patterns and coach development and operations teams on DevSecOps practices.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.
• Ability to work effectively with development and operations teams.

Preferred

• Qualifications AWS Certified DevOps Engineer – Professional, Microsoft Certified: DevOps Engineer Expert (AZ-400), or HashiCorp Certified Terraform Associate.
• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Application Developer (CKAD).
• Experience with containers and Kubernetes (EKS, AKS, GKE, or OKE).
• Experience with GitOps tools (Argo CD, Flux) and policy-as-code.

Integrate security testing into pipelines

Develop reusable Infrastructure-as-Code modules (Terraform, Bicep, CloudFormation) and Ansible playbooks for configuration management.

Required Qualifications

At least 5 years of experience developing and maintaining CI/CD pipelines and automating deployment processes. Hands-on Infrastructure-as-Code experience with Terraform or an equivalent tool. Experience integrating automated security testing (SAST, SCA, DAST, or container scanning) into pipelines. Proficiency with Git and at least one CI/CD platform (GitLab CI, GitHub Actions, Azure DevOps, or Jenkins). Scripting skills in Python, Bash, or PowerShell.

Ability to obtain and maintain the background investigation required by the federal customer.

Preferred

Experience delivering pipelines in federal environments aligned to NIST SP 800-53. Prior support of a civilian federal agency.

All your information will be kept confidential according to EEO guidelines.

TechSur Solutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency. Based in the DC metropolitan area, TechSur specializes in advanced cloud services, modernization for both IT structures and applications, leveraging Agile development, and Data Analytics. Since we were formed in August of 2016, we have supported multiple impactful and exciting government programs.