DevSecOps Engineer (Mid-Level)

About the role

CC Tech Digital builds and modernizes cloud and software systems for government agencies and mission-driven organizations. We're hiring a DevSecOps engineer to help build and maintain a large-scale online platform for a federal civilian client. You'll own the infrastructure-as-code, GitOps delivery pipeline, and security posture that keep the platform running, compliant, and shipping.

What you'll do

• Build and maintain platform infrastructure on AWS using Terraform
• Own GitOps delivery with ArgoCD and package services with Helm on Kubernetes
• Harden CI/CD pipelines — image scanning, dependency and secrets scanning, policy-as-code
• Manage secrets, IAM, and network boundaries in line with federal security requirements
• Implement observability — logging, metrics, alerting — and participate in on-call and incident response
• Support ATO and compliance work: evidence collection, control implementation, and remediation of findings
• Partner with application engineers to make the secure path the easy path

Requirements

• 4–7 years in DevOps, platform, or infrastructure engineering with a security focus
• Deep, hands-on Terraform experience — modules, state management, multi-environment layouts
• Production experience with ArgoCD and Helm on Kubernetes (EKS preferred)
• Strong AWS fundamentals — IAM, VPC, ECS/EKS, RDS, CloudWatch
• Working knowledge of container security and supply-chain hardening
• Comfortable debugging production issues across infrastructure and application layers
• Must be able to obtain and maintain a federal Public Trust clearance. An active Public Trust or higher clearance is strongly preferred.
• U.S. citizenship required
• Based in the United States

Nice to have

• Experience on a federal civilian agency program
• Familiarity with NIST 800-53, FedRAMP, or ATO processes
• Policy-as-code tooling (OPA/Gatekeeper, Kyverno, Sentinel)
• Service mesh, ingress, and certificate management on Kubernetes
• AWS certifications, CKA/CKS, or other relevant technical certifications

Tech stack

You won't have used all of this. We care that you're strong in the core and can pick up the rest.

• Cloud: AWS (EKS, ECS, S3, RDS, CloudWatch, IAM)
• Infrastructure as code: Terraform
• Delivery: ArgoCD, Helm, Kubernetes, GitHub Actions CI/CD
• Containers: Docker
• Security: image and dependency scanning, secrets management, policy-as-code
• Observability: CloudWatch, Prometheus/Grafana or similar
• Process: Git-based workflow, Jira, code review, automated testing

How to apply

Send your CV and a short note about infrastructure you've built or secured to jobs@cctechdigital.com. Links to GitHub or shipped work are welcome.