About the Role: Senior DevSecOps Engineer

We are seeking a highly skilled Senior DevSecOps Engineer to join our hybrid team supporting Randstad and Amtrak in Washington, DC. This role combines hands-on security engineering with leadership responsibilities, focusing on building secure, automated, and scalable DevSecOps pipelines.

As a Senior DevSecOps Engineer, you will integrate security at every stage of the software development lifecycle, leveraging tools like AWS Code Pipeline, Code Build, Code Deploy, Terraform, and Python CDK. You will mentor team members, enforce DevSecOps standards, and ensure compliance with industry frameworks including OWASP, NIST, and CIS.

This position follows the SAFe Agile methodology, requiring occasional onsite presence in DC for key events such as PI Planning.

---

Key Responsibilities for Senior DevSecOps Engineer

• Secure CI/CD Pipelines: Design, implement, and maintain CI/CD pipelines with AWS Code Pipeline, Code Build, and Code Deploy.

• Infrastructure Automation: Automate provisioning with Terraform and AWS CDK (Python).

• Deployment Strategy: Implement blue/green deployments for zero-downtime releases.

• Security Integration: Add SAST, DAST, and SCA tools into pipelines for proactive vulnerability management.

• Collaboration: Partner with development and operations teams to enforce secure coding and deployment standards.

• Cloud Security: Monitor and mitigate vulnerabilities in AWS cloud-native environments.

• Compliance: Ensure adherence to governance standards such as OWASP, NIST, and CIS benchmarks.

• Mentorship: Guide team members on DevSecOps practices and secure design principles.

• Documentation: Maintain technical documentation for security processes and infrastructure configurations.

---

Required Qualifications

• Proven experience as a DevSecOps Engineer with expertise in security automation.

• Hands-on experience with AWS services (Code Pipeline, Code Build, Code Deploy, IAM, EC2, Lambda, S3, CloudFormation).

• Strong proficiency in Python for AWS CDK infrastructure automation.

• Advanced skills with Terraform for Infrastructure as Code.

• Source control experience with Bitbucket.

• Familiarity with Docker and Kubernetes.

• Experience with security scanning tools such as Checkmarx and SonarQube.

• Knowledge of OWASP, NIST, CIS security frameworks.

• Excellent problem-solving, communication, and collaboration skills.

• Experience working in SAFe Agile environments.

---

Preferred Certifications

• AWS Certified DevOps Engineer

• Certified DevSecOps Professional (CDP)

• CISSP or equivalent security certification

---

Work Model

• Location: Washington, DC (hybrid role, onsite presence required for key events).

• Duration: Contract assignment.

• Client: Randstad supporting Amtrak.

---

Why This Role?

This role offers the chance to lead cloud security initiatives at scale while contributing to mission-critical systems. As part of a hybrid SAFe Agile team, you will gain hands-on experience with the latest DevSecOps practices, while mentoring peers and driving compliance with industry-leading frameworks.

---

Ready to Apply?

If you are passionate about DevSecOps leadership and have deep expertise in AWS and automation, we encourage you to apply today.

👉 Check out other positions
👉 Let’s discuss your next career move

---

FAQs – Senior DevSecOps Engineer Role

1. What is the client for this role?
The position supports Randstad for Amtrak in Washington, DC.

2. Is this a hybrid role?
Yes, it requires hybrid work with onsite presence in DC for SAFe Agile events.

3. How long is the contract?
This is a contract assignment, with the potential for extensions based on project needs.

4. Which AWS tools are essential?
AWS Code Pipeline, Code Build, Code Deploy, IAM, EC2, Lambda, and S3.

5. What infrastructure tools are required?
Terraform and AWS CDK (Python).

6. Is experience with blue/green deployments necessary?
Yes, you must have expertise in zero-downtime deployment strategies.

7. Which security tools are relevant?
Checkmarx, SonarQube, and other SAST, DAST, and SCA solutions.

8. What security frameworks are used?
OWASP, NIST, and CIS compliance frameworks.

9. Will container experience be useful?
Yes, Docker and Kubernetes experience is preferred.

10. What certifications are preferred?
AWS DevOps Engineer, Certified DevSecOps Professional (CDP), or CISSP.

11. What coding experience is required?
Proficiency in Python, particularly for AWS CDK automation.

12. What source control tools are used?
Bitbucket is the primary version control platform.

13. How collaborative is the role?
Highly collaborative, working with developers, operations, and product teams.

14. What Agile methodology is followed?
The team follows the SAFe Agile framework.

15. How do I apply?
Submit your application through the internal portal and connect on LinkedIn for career guidance.