Senior DevSecOps Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $150k - $170k / year

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sprezzatura

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2009

🏛️ Government

💼 Consulting

🏥 Healthcare

Government • Consulting • Healthcare

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that provides secure, scalable, and human-centered digital solutions to federal agencies. It specializes in DevSecOps, health IT modernization, intelligent automation, benefits delivery and claims processing, digital communications, data analytics/business intelligence, and organizational change management. Sprezzatura focuses on end-to-end IT and professional services across the product lifecycle—helping government clients modernize systems, improve delivery through Agile and DevSecOps practices, and translate strategy into measurable execution.

📋 Description

• Serve as the senior technical security engineering lead and Security Engineering SME • Lead hands-on remediation of security vulnerabilities, control deficiencies, and technical security debt • Translate security requirements, assessment findings, vulnerabilities, and POA&Ms into engineering solutions • Implement remediation through code, infrastructure, configuration, system rules, access policies, and other technical changes • Design, implement, and maintain automated security quality gates in GitHub Actions and CI/CD pipelines • Integrate and improve SAST, DAST, SCA, secrets detection, dependency scanning, and other automated security checks • Develop and maintain secure configuration baselines for cloud infrastructure and platform components • Implement centralized secrets management and secure credential-handling practices • Lead vulnerability remediation across AWS infrastructure, containers, applications, dependencies, CI/CD pipelines, and shared platform components • Provision, secure, and sustain resilient CI/CD runner infrastructure in VA cloud environments • Implement automation for patching, vulnerability remediation, and security configuration management • Improve security logging, monitoring, and alerting for detection and response to security events • Integrate platform systems with security monitoring and telemetry, including applicable CSOC and continuous-monitoring requirements • Configure and improve AWS GuardDuty, AWS Security Hub CSPM, and related AWS security services • Lead or support DAST/WASA, SAST, secrets detection, and runtime-security implementation • Partner with RMF and security personnel on technical remediation of NIST SP 800-53 control deficiencies • Partner with the Security Automation Engineer to produce reliable security evidence and measurable security-posture data • Provide technical guidance to VA.gov product and engineering teams • Lead technical planning and requirements definition across multiple systems or engineering teams • Document security controls, remediation, architecture decisions, and operational procedures • Participate in technical reviews, incident response, troubleshooting, and a 24/7 engineering on-call rotation

🎯 Requirements

• Bachelor's degree and 10+ years of relevant experience, or equivalent combination of education and experience • Significant hands-on experience in DevSecOps, cloud infrastructure, platform engineering, Site Reliability Engineering, or security engineering • Advanced experience with AWS, preferably in complex production cloud environments • Strong experience designing, implementing, and maintaining CI/CD pipelines, preferably using GitHub Actions • Experience implementing security controls through infrastructure-as-code, configuration management, automation, or software development • Experience with vulnerability identification, prioritization, remediation, and validation • Experience with SAST, DAST, SCA, secrets detection, container scanning, or comparable security capabilities • Experience with infrastructure-as-code and configuration management technologies • Strong knowledge of cloud security, IAM, secrets management, network security, logging, monitoring, and secure configuration practices • Experience with containerized workloads and modern cloud-native architectures • Proficiency with one or more scripting or programming languages used for infrastructure and security automation • Ability to troubleshoot complex production infrastructure and security issues across multiple technology-stack layers • Ability to communicate technical security risks and remediation approaches to engineering, security, product, and program stakeholders • Ability to obtain and maintain the background investigation and access required to support Department of Veterans Affairs systems • Ability to participate in a 24/7 on-call rotation • U.S. Citizen or Permanent Resident required • Must undergo and successfully pass a Public Trust clearance process • Preferred: experience with federal systems under NIST RMF; NIST SP 800-53 Rev. 5; FISMA Moderate or High systems; AWS GovCloud or VAEC; AWS security services; GitHub Actions runners; Kubernetes and container security; SBOM and software supply-chain security; continuous monitoring and security telemetry; security assessments and penetration testing; federal ATO processes, POA&Ms, and control evidence; technical leadership across multiple teams

🏖️ Benefits

• Medical, Dental, and Vision • Health Saving Account with Company contribution when enrolled in eligible plan • Company paid Life, Accidental Death, Short-term & Long-term Disability • Voluntary Accident, Hospital Indemnity, & Critical Care Insurance • Voluntary Medical & Dependent Care Flexible Spending Accounts • Accrued Paid Time Off • Company Paid Holidays • 401(k) Retirement Plan with Company match

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume