Senior DevSecOps Engineer

Description

This position is designated as work-from-home.

About the Role:

The Senior DevSecOps Engineer is responsible for designing, securing, and optimizing cloud-native application platforms in AWS and Kubernetes environments. This role leads the implementation of CI/CD pipelines, Infrastructure as Code, containerized deployments, and security automation while ensuring compliance with security and operational requirements. The engineer partners with development, infrastructure, and cybersecurity teams to improve software delivery, troubleshoot complex technical issues, and implement scalable, cost-effective solutions. Additionally, this position provides technical leadership, mentors team members, and drives best practices in DevSecOps, cloud architecture, automation, and secure software delivery, particularly within regulated or mission-critical environments.

Primary Responsibilities:

• Design, implement, and maintain secure, scalable cloud infrastructure and containerized application platforms in AWS and Kubernetes environments.
• Develop, manage, and optimize CI/CD pipelines to support automated, reliable, and secure software delivery.
• Implement Infrastructure as Code (IaC) solutions using tools such as Terraform and Helm.
• Integrate security controls into the software development lifecycle, including vulnerability scanning, compliance monitoring, and remediation activities.
• Manage and secure Kubernetes (EKS) environments, container registries, and cloud-native application deployments.
• Implement and maintain identity, access management, and authentication solutions using enterprise standards and technologies.
• Troubleshoot and resolve complex issues across applications, containers, cloud infrastructure, networking, operating systems, and CI/CD pipelines.
• Apply zero-trust security principles, least-privilege access controls, and network segmentation practices.
• Assess cloud architecture, performance, security, and cost efficiency, incorporating FinOps principles where appropriate.
• Collaborate with developers, security teams, architects, and customers to translate mission and business requirements into technical solutions.
• Lead technical discussions, provide engineering guidance, and support architecture and design decisions.
• Mentor junior engineers, conduct code and configuration reviews, and promote DevSecOps and engineering best practices.
• Support compliance and security requirements within regulated or government environments, including Platform One and Iron Bank ecosystems when applicable.
• Continuously improve developer experience, operational efficiency, automation, and deployment processes.

Required Qualifications:

• 4-6+ years of relevant experience in DevSecOps, DevOps, cloud engineering, software engineering, infrastructure engineering, or related technical roles.
• Strong experience maintaining and supporting containerized application environments and CI/CD pipelines.
• Experience with Docker, Kubernetes, and cloud-native deployment patterns.
• Experience deploying and managing AWS infrastructure using Infrastructure as Code tools such as Terraform and Helm.
• Experience with AWS services including EKS, IAM, networking, and directory or identity services.
• Experience evaluating application and container vulnerabilities, determining risk and applicability, documenting findings, and implementing remediation when required.
• Experience integrating security into CI/CD pipelines, including technologies such as SAST, DAST, dependency scanning, container scanning, and related security controls.
• Experience with DoD Platform One concepts and tooling, including Iron Bank or similar hardened container ecosystems.
• Experience securing and hardening application environments using zero-trust principles, least privilege, network segmentation, and secure service-to-service communication.
• Experience implementing authentication and authorization using standards such as OIDC and SAML with enterprise identity providers or identity proxies.
• Strong understanding of Linux systems, networking, containers, and virtualization technologies.
• Ability to understand application architecture and application code at a high level, including the ability to follow application logic, pseudocode, configuration, and common frameworks such as Node.js.
• Ability to independently troubleshoot issues across applications, containers, operating systems, networking, CI/CD pipelines, cloud infrastructure, and identity systems.
• Experience improving developer workflows, simplifying deployment processes, and reducing unnecessary complexity within CI/CD and application delivery environments.
• Ability to evaluate cloud architecture and infrastructure decisions with cost awareness and apply FinOps principles when designing or maintaining solutions.
• Ability to lead cross-functional technical discussions, identify customer pain points, and translate business or mission needs into actionable technical requirements.
• Experience mentoring engineers, conducting code reviews, and promoting secure coding, automation, and engineering best practices.

Preferred Qualifications:

• Hands-on experience supporting applications within DoD, federal government, or other highly regulated environments.
• Experience with Platform One, Iron Bank, Harbor, GitLab, Jenkins, Argo CD, or similar DevSecOps platforms.
• Experience with service mesh, mTLS, PKI, certificate management, or enterprise identity integration.
• Experience with AWS Managed Microsoft AD, Active Directory, LDAP, or Kerberos integrations.
• Experience with Helm chart development and Kubernetes application lifecycle management.
• Familiarity with NGINX, ingress controllers, reverse proxies, and application networking.
• Experience with SQL databases and troubleshooting application-to-database connectivity.
• Relevant AWS, Kubernetes, security, Linux, or cloud certifications.

Education Requirements:

• Bachelor's degree preferred. Work Experience + relevant certifications may be considered in lieu of degree.

Citizenship & Clearance Requirements:

• Ability to attain a Federal Government Position of Trust.
• Must be a U.S. citizen.
• Must pass a background investigation.

Target Salary Range

Compensation for roles at Synergy is determined by a variety of factors including, but not limited to, the requirements of the role; level of experience; education and certifications; the individual's combination of knowledge, skills, and abilities; as well as alignment with market data, federal and state laws, and other business and contract considerations. The estimated pay range for this position is: $120,000 - $130,000. The disclosed range has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role, and compensation decisions are dependent on the facts and circumstances of each case and represent just one component of Synergy's total compensation package for employees.

Candidate AI Policy

Synergy is committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate evaluation process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly granted. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

#LI-Remote