Platform Engineer (DevSecOps)

Location: McLean, VA (Onsite – 4 Days/Week)

Duration: 6 Months Contract (Potential Extension)

Citizenship: U.S. Citizen

Pay Rate: $80–$90/hr W2Clearance: Must be eligible to obtain a Secret Clearance

Position Overview: We are seeking an experienced Platform Engineer (DevSecOps) to support mission-critical systems by integrating security into software development and delivery pipelines. The ideal candidate will have strong experience in DevSecOps, cybersecurity engineering, CI/CD automation, cloud security, and federal/defense cybersecurity compliance.

Key Responsibilities: Design, implement, and enhance secure CI/CD pipelines by integrating SAST, DAST, SCA, and container scanning tools. Automate vulnerability detection, security assessments, and remediation workflows. Implement and maintain Infrastructure as Code (IaC) using Terraform and Policy as Code. Strengthen AWS cloud security and Kubernetes environments. Support Risk Management Framework (RMF), continuous ATO, System Security Plans (SSPs), and compliance activities. Apply NIST 800-53 security controls and federal cybersecurity standards. Implement Zero Trust security principles across DevSecOps pipelines and the software development lifecycle. Collaborate with development, operations, and security teams to improve secure software delivery.

Required Qualifications: 5+ years of experience in Cybersecurity Engineering / DevSecOps, preferably in federal or defense environments.3+ years of software engineering experience using Python, TypeScript, or Bash.2+ years of experience implementing cybersecurity solutions in AWS and Kubernetes environments. Hands-on experience with CI/CD, DevSecOps, IaC/CaC, and secure SDLC practices. Strong knowledge of Terraform, security automation, vulnerability scanning, and remediation. Knowledge of NIST SP 800-53, RMF, eMASS, STIG Manager, STIG Viewer, and SCAP tools. Experience with AI-assisted development tools such as Claude Code, Codex, or Pi. Ability to obtain a Secret Security Clearance. High school diploma or GED required.

Nice-to-Have Qualifications: Active Secret Security Clearance. Experience implementing Zero Trust security solutions. Knowledge of GRC engineering, policy-as-code, automated compliance validation, and continuous control monitoring. Experience with POA&M management, audit evidence collection, and compliance reporting. Security+, AWS Solutions Architect, AWS Security, or CISSP certification. Bachelor's degree in Cybersecurity, Computer Science, or a related field.