DevSecOps Engineer

DevSecOps Engineer Hybrid schedule:

• On-site Tuesday, Wednesday, and Thursday Active Secret Clearance  Nationwide IT Services, NIS, is seeking a DevSecOps Engineer for a potential opportunity.  In this position, the Engineer will: Design and manage fully automated pipelines using AWS CodeCommit, CodeBuild, and CodePipeline.


• Integrate automated security scanning tools (SAST/DAST) directly into the build process.
• If the code fails a SonarQube scan or has a high-severity CVE, the pipeline must break.
• Secure the supply chain by managing immutable Docker images in Amazon ECR, ensuring only signed and scanned images are deployed.
• Manage serverless container deployments on ECS Fargate.
• Provision all AWS GovCloud resources using Terraform or CloudFormation.
• Build and maintain hardened base images that are pre-patched and STIG-compliant.
• Secure Amazon Redshift clusters handling sensitive government data...