> Markdown version of [/jobs/ext/4154627-senior-devsecops-engineer-top-secret-onsite](https://www.wearedevelopers.com/jobs/ext/4154627-senior-devsecops-engineer-top-secret-onsite). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior DevSecOps Engineer / Top SECRET / ONSITE

- **Company:** VISUAL SOFT, INC
- **Location:** Redstone Arsenal, AL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Amazon Web Services, Amazon S3, Audit Trail, Cloud Computing Security, Cloud Engineering, Continuous Delivery, Continuous Integration, Identity and Access Management, OpenID, Systems Development Life Cycle, Role-Based Access Control, Release Management, Zero Trust Network Access, Security Software, Software Engineering, Tripwire, Software Vulnerability Management, Cloud Platform System, Delivery Pipeline, Amazon Virtual Private Cloud (VPC), Gitlab, Gitlab-ci, Kubernetes, Infrastructure Automation Frameworks, Deployment Automation, Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** October 23, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=fbff2da738fab337

## About the Role

* AWS:** Deep hands-on experience designing and operating secure infrastructure on Amazon Web Services (EKS, IAM, KMS, Security Hub, GuardDuty, CloudTrail, S3, VPC).
 * DevSecOps:** Proven track record of integrating automated security tooling (SAST/DAST, SCA, Trivy, Snyk, Semgrep, Checkov/tfsec) into active CI/CD pipelines without slowing developer velocity.
 * Cloud Security:** Practical expertise implementing defense-in-depth, container runtime security, network perimeter defense, and cloud compliance auditing.
 * Identity and Access Management:** Advanced knowledge of IAM policies, cross-account access, credential brokering, OIDC token federation for CI/CD runners, and zero-trust access controls.

## Description

We are seeking an experienced **Senior DevSecOps Engineer** to design, automate, and secure our enterprise CI/CD workflows and cloud architecture. In this role, you will embed **DevSecOps** practices directly into delivery pipelines, lead our **cloud security** posture across modern application environments, and establish robust **identity and access management** controls across multi-account **AWS** infrastructures.
-
Primary Responsibilities

*Own the implementation and operation of software delivery pipelines**, from build through production release, ensuring strict adherence to **DevSecOps** and secure delivery standards.
*Develop, administer, and maintain automated build, test, deployment, and release workflows** using GitLab CI/CD, GitLab Runners, **AWS CodePipeline**, **AWS CodeBuild**, and related **AWS** automation technologies.
*Administer GitLab platform infrastructure** (projects, groups, runners, repositories, and permissions), enforce role-based access control and **identity and access management** principles, and develop reusable CI/CD templates and pipeline libraries adopted across Agile teams.
*Integrate automated security capabilities into software delivery pipelines**, including static application security testing (SAST), dynamic testing (DAST), software composition analysis (SCA), container image scanning, secrets detection, Infrastructure-as-Code (IaC) scanning, and software supply chain security.
*Design and maintain automated deployment strategies for Kubernetes-based applications** utilizing Helm, GitOps methodologies, and progressive deployment techniques integrated with **AWS** services (such as Amazon EKS).
*Configure and administer GitLab Container Registry, package repositories, artifact repositories**, and software dependency management solutions supporting secure software delivery and vulnerability remediation.
*Collaborate with Cloud Systems Owners** to ensure **AWS** cloud platforms effectively support automated software deployment, scalability, operational monitoring, application reliability, and end-to-end **cloud security**.
*Architect and enforce identity and access management (IAM)** policies, least-privilege boundaries, IAM Roles for Service Accounts (IRSA), and federated authentication across all CI/CD pipelines and **AWS** cloud environments.
*Partner with software development teams** to improve build reliability, deployment consistency, release quality, and developer productivity through automation, self-service engineering capabilities, and shift-left security practices.
*Work closely with cybersecurity teams** to operationalize **cloud security** benchmarks (CIS, NIST), integrate security gates throughout the SDLC, and ensure continuous compliance with organizational security requirements.
*Troubleshoot build failures, deployment issues, pipeline performance, dependency management, and software delivery problems** across development, integration, and production environments.
*Develop and maintain pipeline documentation, deployment procedures, release management processes**, operational runbooks, and **DevSecOps** engineering standards.
*Participate in Agile ceremonies** while supporting multiple software development teams through automation, continuous integration, continuous delivery, and proactive threat mitigation.
-