Jobs

Our government client is looking for an experienced

DevSecOps Engineer on a hybrid 6+ months renewable contract role in

Mechanicsburg, PA.

Position-

DevSecOps Engineer
Job Overview
Hands-on security automation for AWS delivery. Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST. Azure support is a future consideration, not a core day-one duty.
Scope boundaries
Does not own enterprise AWS Organizations or SCP operations.Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams.Focuses on preventive controls and compliance automation, not incident response.
What You Will Deliver
First 90 days
Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.Evidence exports tying checks to control IDs and producing auditor-ready artifacts.
Ongoing
Harden CDK/CFT modules and pipeline templates as compliance needs evolve.Coach pilot teams to adopt templates.Raise gaps to enterprise teams for org-level enforcement.
Day-to-day responsibilities
Author and maintain AWS CDK constructs and CloudFormation templates; provide Terraform versions as secondary.Implement AWS Config conformance, Security Hub standards, and GuardDuty routing in reference accounts.Wire scanning in CI/CD for app code, containers, and IaC.Create reusable GitHub/Azure DevOps templates with enforcement gates and exception handling.Generate posture and evidence reports mapped to CJIS and NIST controls.
Required Experience
5+ years AWS security automation and DevOps.

Job Title: Senior DevSecOps Engineer

Client: Commonwealth of Pennsylvania

Job ID: 799484 - hybrid (60% remote vs. 40% onsite), 1st day onsite onboarding

Location: Mechanicsburg, PA 17050

Closing Date:04/17/2026

Role summary

PSDC (Public Safety Delivery Center) requires the services of a Senior DevSecOps Engineer to act as consultant with the PSDC Solutions Management group.

Hands-on security automation for AWS delivery.

Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST.

Azure support is a future consideration, not a core day-one duty.

Scope boundaries

Does not own enterprise AWS Organizations or SCP operations.
Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams.
Focuses on preventive controls and compliance automation, not incident response.


What you will deliver

First 90 days

Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.
Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.
IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.
Evidence exports tying checks to control IDs and producing auditor-ready artifacts.


Ongoing

Harden CDK/CFT modules and pipeline templates as compliance needs evolve.
Coach pilot teams to adopt templates.
Raise gaps to enterprise teams for org-level enforcement.


Day-to-day responsibilities

Author and maintain AWS CDK

You will support highly available, business-critical applications within a Site Reliability Engineering team focused on Cloud and Big Data technology.

Responsibilities

Serve as the escalation point for complex, hard-to-define issues across on-premise and AWS environments.
Design and develop services and features for the ecosystem to drive technical acceleration.
Implement automation, infrastructure orchestration, and configuration management.
Consult with project teams and outside vendors to ensure product integrity.
Facilitate training on enterprise tools and best practices.

Required Skills

9+ years of software and development experience, with at least 5+ years focused on DevSecOps technologies.
Deep understanding of Linux systems and strong core Unix skills.
Proficiency in Unix shell scripting and Python.
Hands-on experience with Kubernetes and AWS.
Extensive knowledge of CI tools including Jenkins, Tekton, CircleCI, and GitLab CI.
Experience with Git and Selenium.
Strong understanding of secure coding standards and Agile methodologies.
Experience with Cloud Native, Hybrid architectures, and 12-factor methodology.
Ability to manage and prioritize multiple tasks with little guidance.