Job Description DevSecOps Engineer What You Will Get to

Do:

The DevSecOps Engineer will design, implement, and maintain secure, automated processes for building, testing, deploying, and operating modern enterprise applications. The role supports Agile development, security authorization, production deployment, and ongoing operations while embedding security and quality controls throughout the software development lifecycle. The position will work closely with solution architects, developers, testers, cybersecurity personnel, and program leadership to integrate security throughout the software development lifecycle and enable reliable, repeatable releases. This role requires residency within the Washington, DC Metropolitan Area, with the ability and willingness to travel to the client's site in Falls Church, VA three days a week. Key Responsibilities Implement and maintain secure CI/CD pipelines for application build, testing, security validation, and deployment. Automate application deployments across development, test, staging, and production environments. Integrate SAST, dependency, vulnerability, and configuration scanning into CI/CD pipelines. Implement automated security and quality gates for application releases. Support

NIST SP 800-53

controls, Risk Management Framework (RMF), and Authority to Operate (ATO) activities. Generate and maintain technical evidence supporting security assessments, release readiness, and authorization activities. Support vulnerability identification, remediation, tracking, and reporting. Configure and maintain application logging and monitoring to support security, troubleshooting, and operational visibility. Support secure configuration of authentication, authorization, encryption, secrets, certificates, and application environments. Maintain source control, branching, build, configuration, pipeline, artifact, and release-management processes using Azure DevOps or comparable platforms. Support containerized and cloud-hosted application environments. Automate infrastructure and environment configuration using Infrastructure as Code and scripting where appropriate. Troubleshoot pipeline, environment, integration, and deployment issues. Support production deployment, stabilization, and transition to operations and maintenance (O&M). Maintain pipeline documentation, configuration documentation, deployment procedures, and operational runbooks. Participate in Agile sprints, sprint demonstrations, release readiness activities, and technical reviews. Minimum Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related technical discipline. Minimum of 3 years of relevant professional experience in DevOps, DevSecOps, cloud engineering, application development, infrastructure automation, or a related technical discipline. Hands-on experience implementing or maintaining CI/CD pipelines. Experience with source control and CI/CD platforms such as Azure DevOps Services or Azure DevOps Server, including Azure Repos, Azure Pipelines, YAML pipeline definitions, branching strategies, and release management, or comparable platforms such as GitHub, GitLab, Bitbucket, or Jenkins. Experience with scripting and automation using Python, PowerShell, Bash, or similar technologies. Experience integrating automated testing and security controls into software delivery pipelines, including static application security testing, dynamic application security testing, software composition analysis, secret scanning, container scanning, or comparable capabilities. Working knowledge of NIST security controls, vulnerability management, secure software development, and DevSecOps practices. Hands-on experience supporting cloud-hosted and containerized application environments using Azure, AWS, Docker, Kubernetes, or comparable technologies. Understanding application logging, monitoring, access controls, encryption, and secure configuration. Ability to troubleshoot application deployments, pipelines, and environment issues. Strong written and verbal communication skills. Ability to work collaboratively within an Agile development team. Desired Qualifications Experience supporting federal government applications, cloud environments, or mission-critical systems. Experience supporting systems through the Risk Management Framework (RMF) and Authority to Operate (ATO) processes, including the preparation of technical evidence and remediation of security findings. Working knowledge of NIST SP 800-53, FIPS, FedRAMP, and other federal cybersecurity and secure software development requirements. Experience generating and managing Software Bills of Materials (SBOMs) and implementing software supply chain security controls within CI/CD pipelines. Experience implementing automated security, compliance, and quality gates within CI/CD release pipelines. Relevant certifications such as

Microsoft Certified:

DevOps Engineer Expert, Microsoft Certified:

Azure Administrator Associate, AWS Certified DevOps Engineer - Professional or comparable certifications. Why Work at Southpoint Consulting Inc.? We are not just a consultancy; since 2009 we have been a family of creative minds, solution providers, and catalysts for change. We are committed to achieving outstanding outcomes and enabling federal IT programs to excel. Our commitment to quality and our drive to create an impact distinguishes us in the consulting industry. What is our secret? A collaboration of top-notch talent, passion, and a whole lot of determination! At the core of our company is our value system. Respect, Inclusiveness, Integrity, Transparency and Excellence form the foundation for everything we do.

What We Offer:

Compensation is based on factors including geographic location, education, experience, skills, internal equity, and contract-specific requirements. The projected compensation range for this position is $110,000-$125,000/year. This range represents the anticipated base salary and is one component of Southpoint Consulting's total compensation package. Our benefit offerings for this position include tuition assistance and professional development, health, dental, vision, paid parental leave, company paid life and disability insurance, well-being, health savings, flexible spending, 401k with company matching, paid time off (PTO), and volunteer time off (VTO). Southpoint Consulting is an Equal Employment Opportunity Employer who is committed to maintaining a diverse environment. All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by applicable law.

Employment Type:

Full Time Years Experience:

3 - 5 years

Salary:

$110,000 - $125,000

Annual Bonus/Commission:

No