Full-Time DevSecOps Engineer

Position Title: DevSecOps Engineer, SME

Location: Washington, DC (Remote)

Clearance: Public Trust (Ability to obtain/maintain)

Salary: $180,000-$200,000

Position Summary:

• Command Cyber Solutions is seeking a DevSecOps Engineer, SME to provide expert-level guidance and hands-on support for the IRS Business Tax Account (BTA) modernization initiative.
• Serve as the technical authority for implementing secure, automated CI/CD pipelines, cloud-native infrastructure, and integrated security controls.
• Mentor the DevSecOps team and advise on best practices.

Essential Duties & Responsibilities:

• Serve as the technical authority for DevSecOps strategy, including CI/CD pipeline architecture, security automation, and cloud infrastructure-as-code (IaC).
• Lead the implementation of secure software delivery pipelines using tools like Jenkins, GitHub Action, NexusIQ, SonarQube, and Ansible.
• Define and enforce best practices for containerization and orchestration using Docker/Podman and Kubernetes (AWS EKS).
• Integrate security controls and vulnerability scanning into the CI/CD process.
• Support the development team with automated testing frameworks.
• Provide mentorship and technical guidance.
• Collaborate with cybersecurity, infrastructure, and application teams.
• Conduct performance tuning and troubleshooting of build and deployment processes.

Education, Certification & Experience Requirements:

• Bachelor’s degree in Computer Science, Software Engineering, or a related field.
• CompTIA Sec+ (or equivalent DoD 8570 IAT Level II certification) (Required).
• AWS Certified DevOps Engineer – Professional (or AWS Certified Solutions Architect – Professional (Required).
• 7+ years of experience as a front-end developer, with at least 3+ years in a senior or lead role on IT or government projects.
• Strong experience with AWS cloud environments, Kubernetes, IaC, and security automation.
• Familiarity with IRS security requirements, Publication 4812, and federal cloud compliance.

Knowledge, Skills & Abilities:

• Deep understanding of cloud-native DevSecOps practices, CI/CD pipeline automation, and infrastructure-as-code in AWS.
• Strong knowledge of federal cybersecurity frameworks (NIST 800-53, FISMA, FedRAMP) and secure software development lifecycle (SDLC).
• Expertise in containerization (Docker/Podman), orchestration (Kubernetes), and CI/CD tools (Jenkins, GitHub Actions, SonarQube).
• Proficiency in scripting and automation using tools such as Ansible, Terraform, or CloudFormation.
• Ability to architect enterprise-scale DevSecOps solutions.

What is the last date for applying to the job?

Which countries are accepted for this remote job?