DevSecOps Engineer

DevSecOps EngineerContract RoleOnsite RoleLocation: Spark,MD, USA(Contract with Potential for Conversion to Full-Time Employment.)OverviewWe are seeking a highly skilled DevSecOps Engineer to join a fast-paced software development environment focused on building secure, scalable, and reliable applications. The ideal candidate will have a strong background in software development, cloud infrastructure, automation, security, and CI/CD practices. This role requires close collaboration with engineering teams to integrate security throughout the software development lifecycle while ensuring efficient deployment and operational excellence.Key ResponsibilitiesDesign, implement, and manage cloud infrastructure using Infrastructure as Code (IaC) tools such as Terraform.Build, maintain, and optimize CI/CD pipelines for application and infrastructure deployments.Integrate security controls, vulnerability scanning, compliance checks, and automated testing into development workflows.Collaborate with software engineering teams to implement secure development and deployment practices.Monitor cloud environments and improve overall security posture through proactive vulnerability management.Troubleshoot deployment, infrastructure, and security-related issues.Develop technical solutions for complex engineering challenges using best practices and automation.Create and maintain documentation for DevSecOps processes, standards, and operational procedures.Required QualificationsBachelor's degree in Computer Science, Engineering, or a related STEM field.5-7 years of experience in software development, DevOps, or DevSecOps environments.Strong understanding of DevOps methodologies and Secure SDLC practices.Experience with CI/CD platforms such as Jenkins, GitLab CI, or CircleCI.Hands-on experience with cloud platforms including AWS, Azure, or Google Cloud.Expertise with Infrastructure as Code (IaC) tools such as Terraform, OpenTofu, Ansible, Pulumi, ARM, or Bicep.Knowledge of cloud security, vulnerability management, and compliance practices.Experience with security testing tools such as SonarCloud, OWASP ZAP, SAST, and DAST solutions.Strong analytical, troubleshooting, and problem-solving skills.Excellent communication and collaboration abilities.Preferred QualificationsExperience with Docker and Kubernetes.Strong scripting and automation experience using Python or C#.Familiarity with SQL and PowerShell.Experience in application performance tuning and optimization.Experience working within regulated or quality-driven environments.