SteerBridge
SteerBridge
51 – 200 Employees
ConstructionConsultingDefense
SteerBridge is a service firm supporting government, military, and commercial clients through technology, program management, construction, and facilities expertise. Its work includes IT modernization, software engineering, data analytics, project oversight, HubSpot systems designed to support revenue growth, and construction and facilities management. As a certified SDVOSB, SteerBridge brings together multidisciplinary teams and industry partnerships to deliver digital transformation and operational services across consulting, construction, and defense.

DevSecOps Engineer (AWS GovCloud) - Hybrid Virginia

Secure AWS GovCloud infrastructure, security logging, and CI/CD automation for SteerBridge’s federal disability claims platform. Help enforce compliance and protect mission-critical cloud environments supporting Veterans and federal customers.

Description

  • Lead security infrastructure and automation for a mission-critical VA Disability Claims platform serving Veterans and federal customers in AWS GovCloud.
  • Manage end-to-end security log pipelines from AWS and SaaS sources into Microsoft Sentinel.
  • Onboard log sources while verifying delivery, parsing, and data completeness.
  • Track pipeline health, identify ingestion gaps, and resolve failures.
  • Maintain log retention, centralization, and immutability in accordance with federal logging requirements.
  • Manage GitLab CI/CD pipelines that plan and apply Terraform and Terragrunt across AWS GovCloud accounts and organizations.
  • Implement pipeline security controls such as IaC scanning, secrets detection, container image scanning, dependency checks, and SBOM validation.
  • Strengthen pipelines with least-privilege deployment roles, protected branches, approval controls, and secure state and secrets management.
  • Standardize container build and release processes for ECS and Fargate workloads.
  • Maintain account security baselines covering IAM Identity Center permission sets, least-privilege roles, encryption, and network segmentation.
  • Support zero-trust access and inline inspection configuration and change management.
  • Document infrastructure controls and maintain runbooks for NIST 800-53, RMF, and ATO activities.
  • Partner with security, cloud engineering, architecture, application development, and program leadership teams.

Requirements

  • U.S. citizenship is required under applicable federal contract requirements.
  • At least five years of hands-on experience in DevOps, cloud security, or security engineering, preferably with AWS.
  • Strong infrastructure-as-code experience with Terraform; Terragrunt and policy-as-code or IaC scanning tools such as Checkov or tfsec are advantageous.
  • Experience building and securing CI/CD pipelines, preferably with GitLab CI, including SAST, DAST, SCA, secrets, container image scanning, and secrets management.
  • Experience building SIEM log pipelines, preferably with Microsoft Sentinel, including source onboarding and ingestion troubleshooting.
  • Experience deploying AWS security services such as CloudTrail, GuardDuty, Security Hub, Config, and IAM across multiple accounts.
  • Experience deploying and securing Docker-based workloads with ECS, Fargate, or Kubernetes.
  • Solid knowledge of cloud networking, identity, least-privilege access, and zero-trust principles.
  • Scripting and automation experience with Python, Bash, or PowerShell.
  • Strong troubleshooting, communication, and documentation abilities, including diagrams and runbooks, with a methodical root-cause approach and cross-functional collaboration skills.
  • Preferred experience includes AWS GovCloud or other regulated or federal cloud environments; Vector or similar log transformation tools; AWS Organizations, service control policies, or landing zone patterns; Azure Monitor and KQL; Zscaler ZPA/ZIA or comparable ZTNA/SASE; Palo Alto or similar next-generation firewalls; Tenable and AWS Systems Manager patching; NIST 800-53, RMF, FedRAMP, or federal ATO processes; and AWS Security Specialty or AWS DevOps Engineer Professional certifications.

Benefits

  • Health insurance
  • Dental insurance
  • Vision insurance
  • Life insurance
  • 401(k) retirement plan with matching
  • Paid time off
  • Paid federal holidays
  • Disability coverage
  • Retirement savings
  • Professional development opportunities

Related Jobs

Sierra Nevada Corporation

DevSecOps Engineer III

Sierra Nevada Corporation

Manage secure CI/CD pipelines and cloud infrastructure in support of Sierra Nevada Corporation’s aerospace and national security missions. Help deliver reliable, compliant deployments.

Open