DevSecOps

SteerBridge

. Own the security infrastructure and automation behind a mission-critical VA Disability Claims platform supporting Veterans and federal customers in AWS GovCloud.

Posted 9/25/2026full-timeVienna • Virginia • United StatesMid-LevelSenior💰 $125,000 - $170,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDockerFirewallsKubernetesPythonSplunkTerraform

About the role

Key responsibilities & impact

Own the security infrastructure and automation behind a mission-critical VA Disability Claims platform supporting Veterans and federal customers in AWS GovCloud.
Own end-to-end security log pipelines from AWS and SaaS sources into Microsoft Sentinel.
Onboard new log sources and validate data delivery, parsing, and completeness.
Monitor pipeline health and ingestion gaps and resolve failures.
Manage log retention, centralization, and immutability in line with federal logging requirements.
Own GitLab CI/CD pipelines that plan and apply Terraform and Terragrunt across AWS GovCloud accounts and organizations.
Build security gates into pipelines, including IaC scanning, secrets detection, container image scanning, dependency, and SBOM checks.
Harden pipelines through least-privilege deployment roles, protected branches, approval rules, and state and secrets handling.
Standardize container build and release practices for ECS and Fargate workloads.
Maintain security baselines across accounts, including IAM Identity Center permission sets, least-privilege roles, encryption, and network segmentation.
Support zero-trust access and inline inspection configuration and change management.
Document infrastructure controls and maintain runbooks supporting NIST 800-53, RMF, and ATO activities.
Collaborate with security, cloud engineering, architecture, application development, and program leadership teams.

Requirements

What you’ll need

U.S. citizenship is required for this position under applicable federal contract requirements.
5+ years of hands-on experience across DevOps, cloud security, or security engineering, preferably with AWS.
Strong experience with infrastructure as code (Terraform required; Terragrunt a plus) and policy-as-code and IaC security scanning (e.g. Checkov, tfsec).
Experience building and securing CI/CD pipelines (GitLab CI preferred; GitHub Actions or similar acceptable), including integrated SAST, DAST, SCA, secrets, and container image scanning (e.g., SonarQube, Snyk, Trivy, Checkmarx) and secrets management (e.g., AWS Secrets Manager, KMS).
Experience building log pipelines into a SIEM (Microsoft Sentinel preferred; Splunk or Elastic acceptable), including onboarding sources and troubleshooting ingestion.
Experience deploying AWS security services including CloudTrail, GuardDuty, Security Hub, Config, and IAM across multiple accounts.
Experience deploying and securing containerized workloads (Docker with ECS, Fargate, or Kubernetes).
Solid understanding of cloud networking, identity, least-privilege access, and zero-trust principles.
Scripting and automation skills in Python, Bash, or PowerShell.
Strong troubleshooting, communication, and documentation skills (diagrams, runbooks), with a methodical, root-cause approach and the ability to work across development, operations, and security teams.
Preferred: experience in AWS GovCloud or other regulated or federal cloud environments; Vector or other log transformation tools; multi-account AWS Organizations, service control policies, or AWS landing zone patterns; Azure Monitor data collection and KQL; Zscaler ZPA/ZIA or comparable ZTNA/SASE; Palo Alto or similar next-generation firewalls; Tenable and AWS Systems Manager patching; NIST 800-53, RMF, FedRAMP, or federal ATO processes; AWS Security Specialty or AWS DevOps Engineer Professional certifications.

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
Life Insurance
401(k) Retirement Plan with matching
Paid Time Off
Paid Federal Holidays
Disability coverage
Retirement savings
Professional development opportunities