Senior DevSecOps Engineer
Govcio
Fairfax, VA · Posted October 28, 2026
Just laid off? Start here: a plan for the first weeks
More in Virginia job market · Technology & Software · Engineering jobs
More roles at Govcio
Where Fairfax, VA ranks
Where Fairfax, VA placed in our monthly rankings, month by month. Each month stays online at its own address.
November 2026
- #5Cities with the most jobs that need no experience in the Mid-Atlantic2.0% · of 84
- #6Cities with the most jobs that need no experience in the Southeast2.0% · of 84
- #8Cities with the most hybrid jobs in the Southeast15% · of 84
- #8Best cities for junior jobs in Virginia36% · of 26
- #9Cities with the most jobs that need no experience2.0% · of 100
- #12Best college towns for junior jobs in the Mid-Atlantic37% · of 55
Rankings about engineering jobs
- Best cities for software and engineering jobs #1 San Francisco (3,412 openings)
- Best cities for engineering pay after cost of living #1 San Mateo ($216k)
- Most requested AI skills in engineering jobs #1 AI tools in daily work (6.1%)
- AI tools named most often in engineering jobs #1 Claude (1.7%)
- Employers with the most engineering jobs #1 Amazon (2,992 roles)
Skills this job asks for
Say which you have and which you want to build. We use it to match you to jobs like this one.
About the job
GovCIO is currently hiring for a Senior DevSecOps Engineer to support our DEA Bluestone contract
This position is located in either Arlington or Merrifield, VA and is a hybrid position.
Responsibilities
Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories.
Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.
Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.
Qualifications
High School with 10+ years (or commensurate experience)
Required Skills and Experience
5–8 years DevSecOps/engineering experience.
Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).
Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).
Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
Agile SDLC experience.
Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability
Preferred Skills and Experience
Azure Government Cloud experience alongside AWS.
Istio, Rancher, Dynatrace, or Nexus IQ administration.
Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
Test automation and performance testing exposure (LEAPWORK, JMeter).
Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate.
Posted Salary Range
USD $130,000.00 - USD $170,000.00 /Yr.
Design, author, and maintain CI/CD pipelines in GitHub Actions, including the reusable workflows application teams attach to their repositories.
Operate and integrate the platform toolchain: GitHub Enterprise and GitHub Advanced Security (CodeQL, Dependabot, secret scanning), SonarQube, Sonatype Nexus and Nexus IQ/Firewall, and Anchore container scanning.
Build and maintain the Terraform modules and IaC pipelines that provision workloads in AWS and Azure Government Cloud within the DEA Landing Zone.
Enforce Checkov scanning in the IaC pipeline and remediate policy violations in platform-owned code.
Deploy and manage DSOP GitHub Runners, including runners placed in System Owner cloud accounts.
Operate containerized workloads on Amazon EKS / ECS Fargate, with Rancher for multi-cluster management.
Advance the service mesh and observability stack — Istio (mTLS, zero-trust service-to-service), Kiali, Jaeger, and Dynatrace APM — from pilot toward standardized, org-wide use.
High School with 10+ years (or commensurate experience)
Required Skills and Experience
5–8 years DevSecOps/engineering experience.
Production experience with GitHub Actions (or equivalent CI/CD) building reusable, multi-team pipelines.
Strong Terraform skills and hands-on AWS experience; Kubernetes experience (EKS preferred).
Working knowledge of SAST/SCA/secret-scanning/container-scanning tooling and how to wire it into a pipeline as a blocking gate.
Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell).
Familiarity with NIST SP 800-53 and the practice of mapping technical controls to compliance evidence.
Agile SDLC experience.
Clearance Required: Must have an active Secret clearance and be able to attain DEA suitability
Preferred Skills and Experience
Azure Government Cloud experience alongside AWS.
Istio, Rancher, Dynatrace, or Nexus IQ administration.
Experience operating under a continuous ATO (cATO) and supporting FISMA artifacts.
Test automation and performance testing exposure (LEAPWORK, JMeter).
Certifications such as AWS Solutions Architect / DevOps Engineer Professional, CKA, or Terraform Associate.