DevSecOps Engineer
About DMI
DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com
About the Opportunity
DMI is seeking a mid-level DevSecOps Engineer to augment an existing engineering team supporting a federal agency client's hybrid cloud infrastructure. In this role, you will extend and mature established infrastructure automation, CI/CD pipeline capabilities, container orchestration, and security-hardened delivery practices within an active production environment — building on existing patterns rather than designing from scratch.
Duties and Responsibilities:
Maintain, extend, and improve Terraform and OpenTofu codebases for provisioning and managing hybrid cloud infrastructure; manage state files and remote backends within approved change control processes
Develop and maintain Ansible playbooks and roles to automate system configuration, compliance enforcement, patch management, and application deployment
Build, maintain, and improve GitHub Actions workflows incorporating security gates, including SAST, dependency scanning, secrets detection, and policy-as-code validation
Support containerized application delivery using Docker for image builds and Kubernetes for orchestration; manage Dockerfiles, Kubernetes manifests, Helm charts, and RBAC configuration
Integrate security practices throughout the software delivery lifecycle, enforcing CIS benchmarks and supporting NIST SP 800-53 and FISMA compliance requirements
Participate in stand-ups, sprint planning, and peer code reviews; maintain clear records of all changes to shared codebases and pipelines
Qualifications
Education and Years of Experience:
Bachelor's degree in Information Technology or a related field preferred
Formal education requirements may be waived based on 4 years of relevant professional experience
Hands-on experience with Terraform and/or OpenTofu, including module development, remote state management, and workspace management
Proficiency with Ansible, including playbook and role development, dynamic inventories, and Ansible Vault for secrets management
Demonstrated experience designing and maintaining GitHub Actions workflows, including reusable workflows and security gate integration
Working knowledge of Docker image authoring and hardening, Kubernetes manifest and Helm chart management, and container security scanning
Familiarity with SAST tools (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and policy-as-code frameworks (OPA/Rego)
Proficiency with Git-based workflows, including branching strategies, pull request reviews, and protected branch enforcement
Required Skills & Certifications:
Experience in a federal or highly regulated environment
Familiarity with NIST SP 800-53, FISMA, and FedRAMP compliance requirements
Cloud platform experience (AWS)
Experience with secrets management tools such as HashiCorp Vault
Scripting proficiency in Python and Bash
Background Requirements: Must possess or be eligible to obtain and complete a Public Trust background investigation and/or a Public Trust clearance.
Public Trust Tier 2 clearance required.
Citizenship Status Required: Must be a U.S. Citizen
Physical Requirements: None required for this position.
Location: Remote, US
Working at DMI
DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:
Do What’s Right – We lead with honesty and integrity.
Own the Outcome – We take responsibility and deliver.
Deliver for Our Customers – We are relentless about delivering value.
Think Bold, Act Smart – We innovate with purpose.
Win Together – We collaborate and celebrate our success.
These values aren’t just ideals—they show up in how we support every part of your well-being:
Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.
DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.
***************** No Agencies Please *****************
Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.
DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com
About the Opportunity
DMI is seeking a mid-level DevSecOps Engineer to augment an existing engineering team supporting a federal agency client's hybrid cloud infrastructure. In this role, you will extend and mature established infrastructure automation, CI/CD pipeline capabilities, container orchestration, and security-hardened delivery practices within an active production environment — building on existing patterns rather than designing from scratch.
Duties and Responsibilities:
Maintain, extend, and improve Terraform and OpenTofu codebases for provisioning and managing hybrid cloud infrastructure; manage state files and remote backends within approved change control processes
Develop and maintain Ansible playbooks and roles to automate system configuration, compliance enforcement, patch management, and application deployment
Build, maintain, and improve GitHub Actions workflows incorporating security gates, including SAST, dependency scanning, secrets detection, and policy-as-code validation
Support containerized application delivery using Docker for image builds and Kubernetes for orchestration; manage Dockerfiles, Kubernetes manifests, Helm charts, and RBAC configuration
Integrate security practices throughout the software delivery lifecycle, enforcing CIS benchmarks and supporting NIST SP 800-53 and FISMA compliance requirements
Participate in stand-ups, sprint planning, and peer code reviews; maintain clear records of all changes to shared codebases and pipelines
Qualifications
Education and Years of Experience:
Bachelor's degree in Information Technology or a related field preferred
Formal education requirements may be waived based on 4 years of relevant professional experience
Hands-on experience with Terraform and/or OpenTofu, including module development, remote state management, and workspace management
Proficiency with Ansible, including playbook and role development, dynamic inventories, and Ansible Vault for secrets management
Demonstrated experience designing and maintaining GitHub Actions workflows, including reusable workflows and security gate integration
Working knowledge of Docker image authoring and hardening, Kubernetes manifest and Helm chart management, and container security scanning
Familiarity with SAST tools (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and policy-as-code frameworks (OPA/Rego)
Proficiency with Git-based workflows, including branching strategies, pull request reviews, and protected branch enforcement
Required Skills & Certifications:
Experience in a federal or highly regulated environment
Familiarity with NIST SP 800-53, FISMA, and FedRAMP compliance requirements
Cloud platform experience (AWS)
Experience with secrets management tools such as HashiCorp Vault
Scripting proficiency in Python and Bash
Background Requirements: Must possess or be eligible to obtain and complete a Public Trust background investigation and/or a Public Trust clearance.
Public Trust Tier 2 clearance required.
Citizenship Status Required: Must be a U.S. Citizen
Physical Requirements: None required for this position.
Location: Remote, US
Working at DMI
DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:
Do What’s Right – We lead with honesty and integrity.
Own the Outcome – We take responsibility and deliver.
Deliver for Our Customers – We are relentless about delivering value.
Think Bold, Act Smart – We innovate with purpose.
Win Together – We collaborate and celebrate our success.
These values aren’t just ideals—they show up in how we support every part of your well-being:
Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.
DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.
***************** No Agencies Please *****************
Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.