Junior DevSecOps Engineer

Location: Raston, VA (Hybrid) Department: External - Client Requirement

The Junior DevSecOps Engineer supports the implementation, automation, and maintenance of secure cloud infrastructure and CI/CD pipelines. You will assist in deploying infrastructure-as-code solutions, maintaining cloud environments, integrating security controls, and supporting DevSecOps initiatives across the software development lifecycle. The ideal candidate has foundational experience with AWS or Azure, containerization technologies, automation tools, and a passion for security, continuous improvement, and AI-assisted development practices.

Key Responsibilities

• Support the maintenance of secure, NIST 800-53 compliant, resilient, and high-performing cloud-native infrastructure architectures.
• Assist in identifying security vulnerabilities within cloud architectures and support remediation efforts.
• Support the development and maintenance of security automation tools and scripts using programming languages such as Python.
• Assist with implementing and managing AWS or Azure environments, Docker containers, Kubernetes clusters, GitHub repositories, and dependency management solutions.
• Support the deployment of cloud infrastructure, platform components, HTTP/TLS security configurations, and compliance assets using Terraform, Ansible, Docker, and related technologies.
• Assist in automating routine operational and deployment tasks to improve scalability and consistency.
• Support automated release processes and CI/CD pipeline operations utilizing Jenkins, Spinnaker, and similar tools.
• Help create and maintain Pipeline as Code (PaC) and Infrastructure as Code (IaC) solutions.
• Assist with deploying and managing cloud resources through scripts, manifests, and automation frameworks.
• Support troubleshooting and resolution of infrastructure, network, and deployment-related issues.
• Utilize AI-assisted development tools, including GitHub Copilot, to support code generation, review, validation, and automation activities.

Requirements

Non-Technical Requirements

• Must be a U.S. Citizen.
• Must be willing to work a HYRBID Schedule (2 Days) in Reston, VA & client locations in the Washington D.C. area as required.
• Ability to pass a 7-year background check and obtain/maintain a U.S. Government Clearance
• Strong communication and presentation skills.
• Must be able to prioritize and self-start.
• Must be adaptable/flexible as priorities shift.
• Must be enthusiastic and have passion for learning and constant improvement.
• Must be open to collaboration, feedback and client asks.
• Must enjoy working with a vibrant team of outgoing personalities.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline.
• 1-3 years of experience supporting DevOps, DevSecOps, Cloud Engineering, or Infrastructure Engineering initiatives.
• Foundational experience with Linux operating systems and Shell/Bash scripting.
• Experience with Python or another scripting language.
• Familiarity with AWS or Azure cloud platforms.
• Exposure to Infrastructure as Code (IaC) tools such as Terraform or CloudFormation.
• Familiarity with Docker and containerization technologies.
• Basic understanding of Kubernetes administration and container orchestration concepts.
• Experience working with CI/CD pipelines and automation tools.
• Understanding of cloud security principles and secure software delivery practices.
• Knowledge of computer networking concepts, APIs, load balancing, and web applications.
• Ability to troubleshoot infrastructure and deployment-related issues.
• Experience using AI-assisted development tools such as GitHub Copilot for code generation, review, and validation.

Preferred Qualifications

• Experience supporting cloud infrastructure deployments in AWS.
• Familiarity with Terraform, Ansible, Jenkins, Spinnaker, or similar automation tools.
• Understanding of NIST 800-53 security controls and compliance requirements.
• Experience with container security and vulnerability scanning tools.