Senior DevSecOps Engineer – AWS, CI/CD & Terraform

**FULLY REMOTE**

ScolerTec Inc. has multiple openings for Senior DevSecOps Engineer – AWS, CI/CD & Terraform to support a large-scale federal cloud modernization program.

The successful candidate will be responsible for automating software delivery, deployment pipelines, infrastructure provisioning, configuration, security controls, and operational processes across cloud-based data environments. This role requires a strong security-first DevSecOps background , with hands-on experience integrating security throughout the software and infrastructure lifecycle.

The ideal candidate will have strong experience with AWS, CI/CD pipelines, Infrastructure as Code, Terraform, Kubernetes, automated security scanning, scripting, and cloud security controls .

Key Responsibilities

• Design, build, maintain, and optimize secure CI/CD pipelines for automated build, testing, security scanning, and deployment.
• Embed security, compliance, monitoring, and vulnerability management throughout the DevSecOps lifecycle.
• Automate cloud infrastructure provisioning and configuration using Terraform, CloudFormation, ARM/Bicep , or similar IaC technologies.
• Integrate SAST, DAST, dependency scanning, container scanning, and vulnerability management into CI/CD pipelines.
• Ensure source code and IaC changes are version-controlled, peer-reviewed, security-scanned, and governed through appropriate change-control gates.
• Implement and maintain cloud security controls including IAM, secrets management, encryption, network security, and policy enforcement .
• Develop policy-as-code guardrails and automated compliance checks.
• Conduct security reviews, threat modeling, vulnerability assessments, and remediation activities for cloud infrastructure and pipelines.
• Monitor cloud environments for security events, configuration issues, and compliance drift.
• Support artifact management, release engineering, configuration management, deployment automation, and environment provisioning.
• Develop automation and tooling using Python, Bash, or similar scripting languages .
• Support containerized applications and Kubernetes-based workloads .
• Collaborate with application development, infrastructure, operations, governance, and security teams.
• Support incident response involving infrastructure, CI/CD pipelines, security controls, and deployments.
• Develop technical documentation and provide guidance and mentoring on DevSecOps, secure software delivery, and IaC standards.

Qualifications

• 5+ years of experience in systems engineering, software development, DevOps, DevSecOps, cloud engineering, or related technical roles.
• Bachelor’s degree in Computer Science, Software Engineering, Engineering, or related field.
• Strong hands-on experience designing and supporting enterprise CI/CD pipelines .
• Strong experience with AWS cloud environments and cloud infrastructure automation.
• Hands-on Infrastructure as Code experience using Terraform, CloudFormation, ARM/Bicep , or similar technologies.
• Strong understanding of cloud security, IAM, encryption, network security, secrets management, and compliance controls .
• Strong scripting experience using Python, Bash, Ruby, Perl , or similar languages.
• Experience with CI/CD technologies such as Jenkins, GitLab CI/CD, GitHub Actions, or Azure DevOps .
• Experience with Docker, Kubernetes, and containerized workloads .
• Experience integrating security tools and controls into DevOps pipelines.
• Experience supporting cloud migrations, modernization initiatives, or enterprise-scale cloud environments.

Must Have

• AWS
• DevSecOps
• CI/CD
• Terraform / Infrastructure as Code
• Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps
• SAST / DAST integration
• Vulnerability and dependency scanning
• Docker and Kubernetes
• Python or Bash scripting
• IAM and cloud security
• Git
• Automated infrastructure provisioning

Nice to Have

• Ansible
• SonarQube
• Fortify
• Maven
• Bamboo
• Artifact repository/release management experience
• Multi-cloud or hybrid-cloud experience
• Cloud migration experience
• Policy-as-code implementation
• NIST or other federal security/compliance experience

Preferred Certifications

• AWS Certified Solutions Architect – Professional
• AWS Certified Data Engineer
• AWS SysOps
• Certified Kubernetes Administrator (CKA)
• Docker …