DevSecOps

DevSecOps / Site Reliability Engineer (SRE) 📍Washington, DC Duration: 6 to 12 months contract Mode: Hybrid 3 days onsite a week. Overview • We are seeking a highly skilled DevSecOps / Site Reliability Engineer (SRE) to design, build, and maintain secure, scalable, and resilient cloud infrastructure. • The ideal candidate will have deep hands-on expertise in AWS services, CI/CD pipelines, and infrastructure automation using Python and AWS CDK, combined with a strong focus on security, reliability, and performance. Key Responsibilities • Design, implement, and manage secure CI/CD pipelines using AWS Developer Tools (CodePipeline, CodeBuild, CodeDeploy). • Build and maintain cloud-native applications and infrastructure on AWS. • Develop and automate infrastructure using Python and AWS CDK. • Ensure system reliability, scalability, and availability through proactive monitoring and incident response. • Implement DevSecOps best practices, integrating security into all phases of the SDLC. • Manage and optimize AWS services, including: • Compute: Lambda, ECS, Fargate, EC2 • Networking/API: API Gateway • Storage & Data: S3, DynamoDB • Messaging & Streaming: Kinesis Streams, SQS, SNS • Orchestration: Step Functions • Create and maintain infrastructure using AWS CloudFormation. • Collaborate with development and security teams to identify vulnerabilities and implement remediation strategies. • Support production systems, conduct root cause analysis, and implement preventive measures. Required Qualifications • Expert-level hands-on experience with: • AWS Developer tools: CodePipeline, CodeBuild, CodeDeploy • Core AWS services (Lambda, API Gateway, ECS, Fargate, EC2, S3, DynamoDB, etc.) • Infrastructure as Code using AWS CloudFormation • Strong programming skills in Python, particularly for automation and infrastructure provisioning. • Proven experience implementing DevSecOps and SRE principles in cloud environments. • Experience building high-availability and fault-tolerant systems. • Strong understanding of monitoring, logging, and incident management practices. Preferred / Nice-to-Have Skills • Experience with Dynatrace or similar observability platforms. • Working knowledge of Terraform for infrastructure-as-code. • Familiarity with containerization and orchestration technologies: • Docker • Kubernetes • Experience with application security tools, such as: • Checkmarx • SonarQube • Understanding of compliance, security frameworks, and cloud security best practices. Key Competencies • Strong problem-solving and analytical abilities • Excellent communication and collaboration skills • Ability to work in a fast-paced, mission-critical environment • Proactive mindset with emphasis on automation and continuous improvement