DevSecOps Engineer, Mid Level – Top Secret

ICF

DevSecOps Engineer securing federal clients’ cloud infrastructure and CI/CD pipelines at ICF. Supporting automated security controls, compliance, monitoring, and incident response in US-based remote work.

Posted 8/13/2026full-timeRemote • Virginia • 🇺🇸 United StatesJuniorMid-Level💰 $89,649 - $184,409 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and maintaining CI/CD pipelines, supporting cloud infrastructure, and integrating security practices within DevOps environments. Proficient in utilizing tools such as Terraform and Docker while adhering to federal security standards.

Highest-signal resume keywords

CI/CD Pipeline DevelopmentCloud Infrastructure SupportSecurity Compliance IntegrationDocker ContainerizationActive Top Secret Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CI/CD ConceptsDevOps PracticesTerraformDockerKubernetesLinuxBash ScriptingPython ScriptingAWSAzure

Soft Skills

CollaborationTroubleshootingIncident Response

Tools & Technologies

GitHub ActionsGitLab CIJenkinsAzure DevOpsSonarQubeSnykTrivyCheckovAquaPrisma Cloud

Certifications & Qualifications

AWS Cloud PractitionerAzure FundamentalsSecurity+

Industry Keywords

NISTFISMAFedRAMPDevSecOpsRegulated Environment

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDockerGoogle Cloud PlatformJenkinsKubernetesLinuxPythonTerraformTypeScript

About the role

Key responsibilities & impact

Develop, maintain, and monitor CI/CD pipelines using GitHub Actions, GitLab CI, Jenkins, or Azure DevOps
Support infrastructure as code efforts using Terraform, CloudFormation, or ARM templates
Integrate security scanning and compliance checks into build and deployment pipelines, including SAST, DAST, dependency scanning, and container scanning
Support AWS, Azure, or GCP cloud infrastructure using security best practices
Assist with Docker containerization and Kubernetes orchestration
Monitor environments, logs, and alerts; assist with troubleshooting and incident response
Document configurations, processes, and security controls for audits and compliance
Collaborate with development, operations, and security teams in an Agile/Scrum environment
Learn and apply NIST, FISMA, and FedRAMP federal security frameworks

Requirements

What you’ll need

Active Top Secret (TS) security clearance required
2+ years of experience in DevOps, cloud engineering, systems engineering, or cybersecurity
Must reside and perform work in the United States
US citizenship required
Basic understanding of CI/CD concepts and DevOps practices
Familiarity with AWS, Azure, or GCP
Working knowledge of Linux and basic scripting with Bash, Python, or similar
Exposure to DevSecOps tools such as SonarQube, Snyk, Trivy, Checkov, Aqua, or Prisma Cloud
Experience with Docker and basic Kubernetes concepts
Familiarity with NIST 800-53, FedRAMP, or other federal security standards
Experience supporting applications in a regulated or government environment
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field is listed as desired
Entry-level certifications such as AWS Cloud Practitioner, Azure Fundamentals, Security+, or similar are listed as desired

Benefits

Comp & perks

Fully remote work arrangement
Opportunity to work alongside senior DevOps, security, and application teams
Professional development through learning and applying NIST, FISMA, and FedRAMP frameworks
Reasonable accommodations for disability, veteran, and sincerely held religious beliefs
Equal opportunity workplace