DevSecOps Engineer

Job Title: DevSecOps EngineerLocation: Washington, DC – Hybrid (2-3 days Onsite)Duration: Long termNote: Candidate should have worked with any transportation clientImportant Note :We have shifted to adopting SAFe andEncourage Contractors trained in SAFeRequest that contractors have camera available and on majority of the timeSet expectations that they are part of Agile team on which we need them to embrace self-management and self-organization in terms of their iteration commitments, capacity planning, capacity allocation, etc.As long as they can come DC on need basis and attend the important SAFe ceremonies like PI onsite.Job Overview:We are seeking a highly skilled DevSecOps Engineer to lead the integration of security into our cloud-native development and operations workflows.This role requires deep expertise in AWS tooling, infrastructure automation, and secure CI/CD practices. The ideal candidate will have hands-on experience with AWS Code Pipeline, Code Build, Code Deploy (including blue/green deployments), Bitbucket, Python CDK, and Terraform.Key ResponsibilitiesDesign and implement secure CI/CD pipelines using AWS Code Pipeline, Code Build, and Code Deploy.Configure and manage blue/green deployments for zero-downtime releases.Integrate Dynatrace Observability with applications.Automate infrastructure provisioning using Terraform and AWS CDK (Python).Integrate security scanning tools (SAST, DAST, SCA) into build and deployment workflows.Collaborate with development and operations teams to enforce secure coding and deployment standards.Monitor and respond to vulnerabilities across applications and infrastructure.Ensure compliance with security policies and cloud governance frameworks.Maintain documentation for security processes, configurations, and deployment strategies.Required SkillsStrong hands-on experience with AWS services, including:Code Pipeline, Code Build, Code DeployIAM, EC2, Lambda, S3, CloudFormationProficiency in Python, especially for infrastructure automation using AWS CDK.Proficient with Dynatrace Observability platform.Experience with Terraform for infrastructure-as-code.Familiarity with Bitbucket for source control and pipeline management.Knowledge of containerization and orchestration (Docker, Kubernetes).Experience with security tools (e.g. Checkmarx, SonarQube).Understanding of security frameworks (e.g., OWASP, NIST, CIS).AWS Certified DevOps EngineerCertified DevSecOps Professional (CDP)CISSP or equivalent security certificationSoft SkillsStrong analytical and problem-solving abilities.Excellent communication and collaboration skills.Ability to work independently and in cross-functional teams.Passion for automation, security, and continuous improvement.