Senior DevSecOps Engineer - Top SECRET - ONSITE
Senior DevSecOps Engineer working fully onsite in Huntsville, AL on a Visual Soft project for a federal agency. Day to day: building and securing enterprise CI/CD pipelines and multi-account AWS infrastructure using GitLab CI/CD, AWS (EKS, IAM), Kubernetes/Helm, and embedded security tooling (SAST/DAST, SCA, Trivy, Snyk). Requires US citizenship with active Top Secret clearance.
- Compensation
- Not disclosed
- Location
- Huntsville, AL
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Contract
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- US citizen with active TOP SECRET security clearance
- Bachelor's degree with 8+ years of experience
- Deep hands-on AWS experience (EKS, IAM, KMS, Security Hub, GuardDuty, CloudTrail, S3, VPC)
- Proven track record integrating automated security tooling (SAST/DAST, SCA, Trivy, Snyk, Semgrep, Checkov/tfsec) into active CI/CD pipelines
- Practical cloud security expertise: defense-in-depth, container runtime security, network perimeter defense, cloud compliance auditing
- Advanced IAM knowledge: policies, cross-account access, credential brokering, OIDC token federation for CI/CD runners, zero-trust access controls
- Able to work fully onsite in Huntsville, AL
Full description
Visual Soft, Inc is seeking qualified candidates (US Citizens with active TOP SECRET clearance - a requirement on its Project with a Major Prime) for the following position for a federal agency.
Job Title: Senior DevSecOps Engineer
Location: Huntsville, AL (ONSITE)
Salary: based on experience on other qualifications. OR 1099 is also available only for individuals NOT C2C scenario, check will be issued in legal name
Clearance: TOP SECRET is a must and job is fully ONSITE
Education: Bachelor's degree with 8+ years of experience
Senior DevSecOps Engineer
Role Overview
We are seeking an experienced Senior DevSecOps Engineer to design, automate, and secure our enterprise CI/CD workflows and cloud architecture. In this role, you will embed DevSecOps practices directly into delivery pipelines, lead our cloud security posture across modern application environments, and establish robust identity and access management controls across multi-account AWS infrastructures.
---
Primary Responsibilities
*Own the implementation and operation of software delivery pipelines, from build through production release, ensuring strict adherence to DevSecOps** and secure delivery standards.
*Develop, administer, and maintain automated build, test, deployment, and release workflows using GitLab CI/CD, GitLab Runners, AWS CodePipeline, AWS CodeBuild, and related AWS** automation technologies.
*Administer GitLab platform infrastructure (projects, groups, runners, repositories, and permissions), enforce role-based access control and identity and access management** principles, and develop reusable CI/CD templates and pipeline libraries adopted across Agile teams.
*Integrate automated security capabilities into software delivery pipelines**, including static application security testing (SAST), dynamic testing (DAST), software composition analysis (SCA), container image scanning, secrets detection, Infrastructure-as-Code (IaC) scanning, and software supply chain security.
*Design and maintain automated deployment strategies for Kubernetes-based applications utilizing Helm, GitOps methodologies, and progressive deployment techniques integrated with AWS** services (such as Amazon EKS).