Jlgovllc

Salary:

PLEASE READ IN ITS ENTIRETY

Location: Hybrid Washington, DC. Candidates must be within 100 miles of the site to attend meetings or as required by customer request from time to time; this is otherwise a remote role. Employer: JLGOV, in support of a federal client (Congressional Budget Office). Due to the nature of the work, candidates must be U.S. citizens. No visa or citizenship sponsorship available for this opportunity.

Responsibilities

JLGOV is seeking a Mid-Level DevSecOps Engineer to extend and mature an existing hybrid-cloud infrastructure automation and secure software delivery practice, working within established patterns and standards rather than designing from scratch.

Responsibilities include, but are not limited to:

• Maintaining and extending Terraform/OpenTofu modules, including remote state and workspace management
• Developing and maintaining Ansible playbooks/roles for configuration management, patching, and deployment automation
• Building and improving GitHub Actions CI/CD workflows, including SAST, dependency scanning, secrets detection, and policy-as-code gates
• Authoring and hardening Dockerfiles; managing Kubernetes manifests and Helm charts, including RBAC and namespace configuration
• Scanning container images for vulnerabilities prior to deployment
• Integrating shift-left security practices across the SDLC, aligned to CIS benchmarks and client security baselines

Personnel Requirements

Hands-on proficiency with Terraform/OpenTofu, Ansible, GitHub Actions, Docker, and Kubernetes; familiarity with SAST tools (Semgrep, Checkov, tfsec), secrets scanning (Gitleaks, Detect-Secrets), and policy-as-code (OPA/Rego)

Years of Experience

Minimum 35 years in DevSecOps, infrastructure automation, or platform engineering roles

Preferred Education

Bachelor's degree in Computer Science, Information Technology, or a related field

Substitute Education

Additional relevant professional experience may be substituted for a degree on a year-for-year basis

Specific Responsibilities / Tasks

• Deliver IaC, CaC, pipeline, and container work per sprint assignments (bi-weekly cadence)
• Participate in change advisory processes no production changes without approval
• Refactor and optimize existing codebases for reusability and maintainability during hardening phases
• Contribute to runbooks and engineering documentation; support structured knowledge transfer at engagement close

Clearance

Position requires ability to obtain and maintain a U.S. Government Public Trust clearance (specific level to be confirmed based on client determination)

Certifications

No certifications are mandated by the solicitation for this role. Preferred: experience in a federal/regulated environment; familiarity with NIST SP 800-53, FISMA, and FedRAMP; AWS experience; HashiCorp Vault experience; Python/Bash scripting.

Equal Employment Opportunity

JLGOV is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable federal, state, or local law.