Dev/Sec Ops Engineer

All Native Group, The Federal Services Division of Ho-Chunk Inc.

Mid-Level DevSecOps Engineer at All Native Group enhancing infrastructure automation for the Congressional Budget Office. Focus on CI/CD pipelines, container orchestration, and security practices.

Posted 7/15/2026full-timeWashington • District of Columbia, Washington • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in DevSecOps practices, focusing on infrastructure automation, security integration, and compliance within regulated environments. Proficient in managing and deploying containerized applications using industry-standard tools and methodologies.

Highest-signal resume keywords

Terraform/OpenTofuAnsibleGitHub ActionsDockerKubernetes

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Infrastructure AutomationConfiguration ManagementContainer Security ScanningSAST ToolingPolicy-as-Code Validation

Soft Skills

CollaborationDocumentationKnowledge Transfer

Tools & Technologies

GitHub Actions WorkflowsHelmTrivyGrypeCIS Benchmarks

Certifications & Qualifications

Certified Kubernetes Administrator (CKA)HashiCorp Terraform Associate

Industry Keywords

DevSecOpsComplianceNIST SP 800-53FISMAChange Management

Tech Stack

Tools & technologies

AnsibleDockerKubernetesTerraform

About the role

Key responsibilities & impact

Maintain, extend, and refactor Terraform and OpenTofu codebases, including modular configurations, remote state, and backend management within approved change control.
Develop and maintain Ansible playbooks and roles for configuration, compliance enforcement, patch management, and application deployment.
Build and improve GitHub Actions workflows with security gates including SAST, dependency scanning, secrets detection, and policy-as-code validation.
Support containerized delivery using Docker and Kubernetes, authoring hardened images, manifests, and Helm charts, with vulnerability scanning prior to deployment.
Integrate Shift-Left security throughout the delivery lifecycle, enforcing CIS benchmarks and CBO baselines and supporting NIST SP 800-53 and FISMA compliance.
Work within CBO's version control, change management, and peer review workflows; push no changes to production without following the change advisory process.
Produce and maintain documentation, runbooks, and compliance artifacts to support audits and assessments.
Participate in stand-ups, sprint planning, and technical reviews, and conduct knowledge transfer with CBO engineering staff.

Requirements

What you’ll need

Minimum of 5 years of DevSecOps or infrastructure automation experience.
Hands-on experience with Terraform/OpenTofu, Ansible, and GitHub Actions.
Working experience with Docker, Kubernetes, Helm, and container security scanning (Trivy, Grype, or equivalent).
Experience with SAST tooling (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and OPA/Rego.
Federal or highly regulated environment experience preferred.
Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
Certified Kubernetes Administrator (CKA) or HashiCorp Terraform Associate is preferred.

Benefits

Comp & perks

Drug Free Workplace
Professional development opportunities