Jobs

Our government client is looking for an experienced

DevSecOps Engineer on a hybrid 6+ months renewable contract role in

Mechanicsburg, PA.

Position-

DevSecOps Engineer
Job Overview
Hands-on security automation for AWS delivery. Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST. Azure support is a future consideration, not a core day-one duty.
Scope boundaries
Does not own enterprise AWS Organizations or SCP operations.Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams.Focuses on preventive controls and compliance automation, not incident response.
What You Will Deliver
First 90 days
Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.Evidence exports tying checks to control IDs and producing auditor-ready artifacts.
Ongoing
Harden CDK/CFT modules and pipeline templates as compliance needs evolve.Coach pilot teams to adopt templates.Raise gaps to enterprise teams for org-level enforcement.
Day-to-day responsibilities
Author and maintain AWS CDK constructs and CloudFormation templates; provide Terraform versions as secondary.Implement AWS Config conformance, Security Hub standards, and GuardDuty routing in reference accounts.Wire scanning in CI/CD for app code, containers, and IaC.Create reusable GitHub/Azure DevOps templates with enforcement gates and exception handling.Generate posture and evidence reports mapped to CJIS and NIST controls.
Required Experience
5+ years AWS security automation and DevOps.

Job Title: Senior DevSecOps Engineer

Client: Commonwealth of Pennsylvania

Job ID: 799484 - hybrid (60% remote vs. 40% onsite), 1st day onsite onboarding

Location: Mechanicsburg, PA 17050

Closing Date:04/17/2026

Role summary

PSDC (Public Safety Delivery Center) requires the services of a Senior DevSecOps Engineer to act as consultant with the PSDC Solutions Management group.

Hands-on security automation for AWS delivery.

Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST.

Azure support is a future consideration, not a core day-one duty.

Scope boundaries

Does not own enterprise AWS Organizations or SCP operations.
Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams.
Focuses on preventive controls and compliance automation, not incident response.


What you will deliver

First 90 days

Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.
Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.
IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.
Evidence exports tying checks to control IDs and producing auditor-ready artifacts.


Ongoing

Harden CDK/CFT modules and pipeline templates as compliance needs evolve.
Coach pilot teams to adopt templates.
Raise gaps to enterprise teams for org-level enforcement.


Day-to-day responsibilities

Author and maintain AWS CDK

Job Title: Test Automation Engineer – Selenium/Cucumber/SQL

Location: Pittsburgh, PA
Employment Type: Contract

Job Overview:

We are looking for a detail-oriented and experienced Test Automation Engineer to join our QA Automation Team. The ideal candidate will have hands-on experience with Selenium, Cucumber, and SQL, and will play a key role in developing automated test solutions for our web applications. This role is essential for ensuring the quality and performance of our software by integrating testing into every stage of development.

Responsibilities:

Design, develop, and maintain robust automated test scripts using Selenium WebDriver and Cucumber.Create and execute BDD-style test scenarios and integrate them into the automation suite.Develop and execute SQL queries for data validation and backend testing.Collaborate with developers, QA engineers, and product owners to define test requirements and ensure full coverage.Integrate automated tests into CI/CD pipelines to support continuous integration and delivery.Debug test failures, analyze root causes, and log defects using bug-tracking tools.Create and maintain test documentation including test plans, cases, and reports.Continuously enhance automation frameworks and optimize test performance.Stay updated with the latest industry trends and tools in test automation.Requirements:

4+ years of experience in test automation, with strong expertise in Selenium and Cucumber.Solid experience writing and executing complex SQL queries for database validation.Strong understanding of BDD concepts, test automation design patterns, and UI testing.Familiarity with CI/CD tools such as Jenkins, GitHub Actions, or Azure DevOps.Experience with test and defect management tools like Jira, TestRail, or similar.Strong analytical and debugging skills with keen attention to detail.Excellent communication skills and ability to work collaboratively in a team environment.Preferred Qualifications:

Experience with API testing tools su

Job DescriptionJob DescriptionOverviewWe are hiring a seasoned Staff DevSecOps Engineer to embed security at every stage of the software development lifecycle. This is a hands-on role for someone passionate about security automation, cloud platforms, and driving secure DevOps practices. Ideal candidates bring 5–8+ years of experience and a strong grasp of CI/CD, Kubernetes, cloud security, and infrastructure as code.

Key ResponsibilitiesIntegrate security seamlessly into the CI/CD pipeline across the software development lifecycle.Design, implement, and manage security automation tools and workflows.Define and enforce cloud and on-premises security policies and best practices.Monitor, analyze, and remediate security vulnerabilities and incidents.Perform code reviews, vulnerability scans, and penetration tests.Secure Kubernetes clusters and containerized environments.Implement and manage security tools (firewalls, IDS/IPS, endpoint protection).Automate security tasks using Python and shell scripting.Manage infrastructure using Terraform, OpenTofu, or CloudFormation.Participate in incident response and disaster recovery planning.Qualifications5+ years in DevSecOps, Security Engineering, or DevOps with a strong security focus.Hands-on experience with AWS (or GCP/Azure with willingness to move into AWS).Proficient with CI/CD tools such as GitHub Actions, Jenkins, GitLab CI, or CircleCI.Strong Kubernetes experience in production environments.Experience with infrastructure-as-code tools: Terraform, OpenTofu, or CloudFormation.Strong programming skills in Python and shell scripting.Deep knowledge of secure coding practices, encryption, and access control.Excellent communication and cross-functional collaboration skills.US Citizenship or a Green Card is required due to ITAR data handling.Preferred QualificationsSecurity architecture and secure system design experience.Experience with JavaScript and securing JavaScript-based applications.Certifications such as CISSP, Securi

A leading SaaS fintech provider in turnkey lending is undertaking a critical evolution of its infrastructure—and they\'re looking for a Senior DevSecOps Engineer to lead the way. This role sits at the intersection of AWS-scale cloud systems and secure on-prem data centers, offering a rare chance to design and secure a platform that truly spans both worlds.

Ideal candidates will bring not only deep technical expertise but also the strategic mindset of a trusted consultant. You\'ll define security baselines, embed controls in the CI/CD lifecycle, and influence infrastructure strategy across engineering, compliance, and platform teams. From federated identity to audit readiness, your work will be foundational to the company\'s ability to scale securely and meet strict regulatory standards.

Required Skills & Experience

5+ years in DevOps, Security Engineering, or DevSecOps roles, with significant experience working across hybrid cloud and on-prem environments Deep hands-on experience architecting and securing AWS infrastructure, including IAM, network security controls, and managed services Expertise with Infrastructure as Code using Terraform, including multi-environment deployments and policy enforcement Desired Skills & Experience

Container security across both cloud and on-prem orchestration platforms (e.g., Kubernetes, Docker) On-premises security knowledge including Linux/Windows hardening, firewalls, network segmentation, and virtualization platforms Federated IAM experience, especially involving Active Directory integration with cloud-based identity providers Daily Responsibilities

Hands-On Engineering: 70% Team Collaboration & Cross-Functional Work: 30% Preferred Skills & Certifications

Certifications such as CISSP, AWS Certified Security, CISM, or GitHub Actions Certification Experience with hardware security modules (HSMs) and enterprise-level secrets management in a hybrid environment Applicants must be currently authorized to work in United