DevSecOps Engineer III

National Trust

DevSecOps Engineer III at National Digital Trust Company securing digital asset infrastructure. Lead modernization in CI/CD, security controls, and cloud-native systems.

Posted 7/27/2026full-timeRemote • Washington • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in DevSecOps and Cloud Security Engineering, with a strong focus on secure software development practices, infrastructure automation, and operational readiness. Proficient in implementing security frameworks and modernizing CI/CD pipelines to ensure secure and efficient delivery workflows.

Highest-signal resume keywords

DevSecOps ExperienceCloud Security EngineeringInfrastructure as Code (Terraform)Kubernetes SecuritySCM Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

DevSecOpsCloud Security EngineeringInfrastructure as CodeKubernetesRBACCI/CDPolicy as CodeSecure Software Development FrameworkAutomationObservability

Soft Skills

Excellent CommunicatorProactive Collaborator

Tools & Technologies

TerraformHelmArgoCDCrossplaneITSM

Industry Keywords

NIST CSF 2.0Zero-Trust SecurityLeast PrivilegeSupply Chain IntegrityOperational Readiness

Tech Stack

Tools & technologies

CloudITSMKubernetesSDLCTerraform

About the role

Key responsibilities & impact

Lead the hardening and modernization of our GitHub ecosystem — consolidating organizations, implementing guardrails and RBAC best practices, and establishing policy-as-code governance at scale.
Assess and evolve the current CI/CD posture — modernizing pipelines, evaluating tooling, and driving toward fully automated secure delivery workflows.
Implement Secure Software Development Framework (SSDF) practices to embed “secure-by-design” principles throughout the SDLC — ensuring supply chain integrity from commit to production.
Act as an SRE for new application infrastructure — building out observability, proactive reliability patterns, performance scaling strategy, and operational readiness.
Design, manage, and automate cloud infrastructure (including container and container orchestration where applicable) through infrastructure-as-code — aligned to NIST CSF 2.0, least-privilege, and zero-trust security models.
Develop and integrate ITSM operational workflows — introducing automation and process maturity where needed to align engineering velocity with auditable controls and resilience.
Promote a culture of security across the organization.
Be able to wear many hats, performing critically required duties as necessary, especially as the team is being developed.
Occasional travel to other offices, customers, and vendor offices

Requirements

What you’ll need

5–8+ years of experience in DevSecOps, SRE, or Cloud Security Engineering roles operating in production-critical environments
Deep hands-on expertise with leading cloud providers (IAM, networking, security services, automation, zero-trust / least privilege, cost awareness)
Practical experience operating and securing Kubernetes — including IaC-driven provisioning, policy enforcement, and observability
Strong command of SCM administration — including RBAC, repo automation, organization policy enforcement, and secure SDLC controls
Proficiency with Infrastructure as Code (Terraform, CDK, or equivalent) and configuration automation (e.g., Helm, ArgoCD, Crossplane, etc. a plus)
Familiarity with ITSM-aligned engineering operations — enabling traceability, incident management, and operational readiness at scale
Excellent communicator and proactive collaborator — able to influence cross-functional teams and advocate for secure-by-design principles.

Benefits

Comp & perks

Medical, Dental, and Vision insurance
401(k)
Disability insurance