DevSecOps Engineer

Fortreum

DevSecOps Engineer deploying Fortreum’s AI compliance platform across cloud and classified environments. Automating secure infrastructure, compliance evidence collection, and ATO workflows for federal and enterprise customers.

Posted 8/19/2026full-timeLeesburg • Virginia • 🇺🇸 United StatesSeniorLead💰 $155,000 - $205,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining CI/CD pipelines, managing AWS cloud infrastructure with Terraform, and implementing security controls aligned with NIST standards. Proficient in Kubernetes for container orchestration and integrating compliance workflows within DevSecOps environments.

Highest-signal resume keywords

AWS Infrastructure ArchitectureTerraform Module DesignKubernetes Cluster ManagementNIST 800-53 ComplianceScripting Proficiency (Python, Bash)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CD Pipeline DesignAWS ManagementTerraformKubernetesHelmArgoCDScripting (Python, Bash)Security Controls ImplementationCompliance AutomationObservability Strategies

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

GitHubJIRASplunkSnykKovr AI Platform

Certifications & Qualifications

Security+AWS Certified SecurityCYSA+CISSP

Industry Keywords

DevOpsPlatform EngineeringSite Reliability EngineeringFedRAMPCMMCDoD SRGOSCALContinuous MonitoringAudit-ReadinessTop Secret Clearance

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesPythonSplunkTerraform

About the role

Key responsibilities & impact

Design, build, and maintain CI/CD pipelines supporting rapid, secure software delivery
Manage AWS cloud infrastructure, with exposure to Azure/GCP, using Terraform, including module design and reusable patterns
Administer and scale containerized workloads using Kubernetes/EKS, Helm, and ArgoCD
Implement and maintain security controls and monitoring aligned to NIST 800-53 and OSCAL-based frameworks
Design observability strategies covering logging, metrics, alerting, and SLOs for production reliability at scale
Integrate GitHub, JIRA, Splunk, and Snyk into automated compliance and remediation workflows
Collaborate with engineering and compliance teams to maintain continuous authorization posture
Support continuous monitoring and audit-readiness activities, including evidence collection and control mapping
Troubleshoot production issues and improve deployment reliability
Build and maintain documentation, runbooks, and architecture decision records
Represent infrastructure and security in cross-functional planning and customer-facing technical conversations
Deploy, integrate, and operationalize the Kovr AI Platform within enterprise and federal customer environments
Build integrations with customer DevSecOps toolchains, automate evidence collection and continuous monitoring, and configure compliance workflows that accelerate ATO

Requirements

What you’ll need

7+ years of DevOps, Platform Engineering, or Site Reliability Engineering experience
Hands-on experience architecting AWS infrastructure using Terraform at scale
Strong production experience with Kubernetes (EKS or similar), including cluster design, Helm Charts, and GitHub/GitOps workflows
Direct experience with FedRAMP, CMMC, NIST 800-53/800-171, or DoD SRG compliance environments
Familiarity with OSCAL or other machine-readable compliance/documentation frameworks
Experience integrating SAST/DAST or IaC security scanning into a pipeline
Scripting/automation proficiency (Python, Bash, or similar)
U.S. Citizenship
Ability to obtain and maintain a Top Secret clearance
Comfortable working in a fast-moving startup-within-a-company environment
Local to Washington, DC metro area
Existing security or cloud certifications preferred (Security+, AWS Certified Security, CYSA+, CISSP)
Experience integrating LLM coding agents, MCPs, and automations into DevOps workflows preferred
Prior experience holding or maintaining a Top Secret security clearance preferred
Background supporting federal DevSecOps deployments or highly regulated commercial clients preferred
Ability to work in the United States without sponsorship

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401K plan with a 4% match
Company paid short-term disability
Company paid long-term disability
Company paid AD&D and life insurance
Flex time off
Annual bonuses
Training stipends
Certification reimbursements
Access to over 30,000 free online training courses
Personal cell phone allowance
New hire and annual home office stipend
Spot awards
Eleven paid holidays