About the job
Join Credence as a Senior DevSecOps Engineer!
At Credence, we empower our clients' mission-critical initiatives through innovative technology solutions. Our offerings include advanced AI/ML applications, enterprise modernization, and sophisticated intelligence capabilities tailored for leading defense and health federal organizations. We are committed to fostering partnership and trust to enhance mission success for war-fighters and secure a brighter future for our nation.
We pride ourselves on being a privately-held company that consistently ranks as a top workplace and has earned a spot on the Inc. 5000 Fastest Growing Private Companies list for twelve consecutive years. Our philosophy centers on servant leadership, believing that by prioritizing the success of our clients, team members, and partners, we collectively achieve greater outcomes.
This is your opportunity to step into a crucial role as a Senior DevSecOps Engineer, where you will support vital federal programs hosted on AWS GovCloud. This hybrid position demands expertise in DevSecOps best practices, cloud automation, security compliance, and CI/CD processes aimed at enhancing the security, scalability, and efficiency of mission-critical applications.
Core Responsibilities:
- Design, implement, and maintain secure, scalable, and compliant AWS GovCloud environments for DoD and Civilian agency applications.
- Develop and optimize CI/CD pipelines using tools such as GitLab CI/CD, Jenkins, AWS Code Pipeline, and Terraform for automated deployments and security compliance.
- Ensure compliance with Federal cybersecurity frameworks (e.g., NIST 800-171, NIST 800-53, RMF, FedRAMP, Zero Trust). Implement STIGs, security baselines, and automated security scanning (SAST/DAST).
- Automate infrastructure provisioning and configuration management using Terraform, CloudFormation, and Ansible.
- Deploy and manage Docker containers and Kubernetes clusters in AWS GovCloud, leveraging services like Amazon EKS, ECS, and Fargate.
- Implement AWS CloudWatch, AWS Security Hub, GuardDuty, Splunk, or ELK for proactive monitoring, logging, and compliance reporting.
- Create automation scripts using Python, Bash, or PowerShell to enhance deployment efficiency and security enforcement.
- Collaborate with software developers, cybersecurity teams, and cloud engineers to integrate security and automation into the software development lifecycle (SDLC).

