{"id":3552472,"url":"https://alion.io/job/open-data-jobs-devsecops-engineer-kubernetes-cicd","title":"DevSecOps Engineer (Kubernetes, CI/CD)","company":{"id":679417,"name":"Open Data Jobs","domain":"opendatajobs.com","url":"https://alion.io/company/open-data-jobs","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Copilot","optional":false},{"name":"Docker","optional":false},{"name":"Git","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Progressive Delivery","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-30T23:15:12Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-04T03:26:40Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Peregrine\nPeregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We work across the full lifecycle-from strategy and governance through architecture, engineering, analytics, AI, visualization, and training-for clients including the SEC, PCAOB, DDOT, and DCAA.\nOur clients describe our support as “absolutely excellent” and our people as “instrumental to organization’s success.” Winner of the United Nations COP27 Datathon, our work has earned all Exceptional CPARS ratings, SEC Chair’s Awards, the SEC Vision Award, and recognition from FDA leadership.\nWe are also built differently. Peregrine is the first and only social enterprise organized as a Benefit Corporation and SBA 8(a) company focused on AI and data for government. We believe business success should create client value, social value, and opportunity for our people.\nAs we enter our next stage of growth, we need dependable, motivated, and skilled people who have a combination of intellectual curiosity and intellectual courage. With new clients, larger programs, and expanding responsibilities, the people joining Peregrine now will have the opportunity to help shape the company we become.\nPeople first. Ownership always.\nWe solve problems through people, process, and technology-in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation are the foundational pillars of delivery on which our skills stand. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else.\nAt Peregrine, you are not joining simply to fill a position. You are joining a team, taking ownership of a mission, and helping build a company. If that excites you, we should talk.\nAt Peregrine Advisors, you will stand up and operate the delivery pipelines and cloud infrastructure that carry federal systems into production, keeping all of it secure and automated. But we hire people, not seats. As the work evolves, you will move to where the hardest problems are.\nThis is a hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.\nYour first project\nExpect your first project to put assigned delivery pipelines squarely in your hands, along with the environments under them. Depending on the assignment, you may:\nCreate secure, cloud-native infrastructure in Amazon Web Services (AWS), develop the continuous integration and continuous delivery (CI/CD) pipelines used to deploy to that infrastructure, and maintain both.\nCapture that infrastructure in code, using Terraform or CloudFormation.\nBuild security into the delivery path with static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), vulnerability scanning, and secrets management.\nSupport the workloads that run on Docker and Kubernetes, and run down faults in infrastructure, networking, deployments, and security.\nScript the repeatable operational work, and automate provisioning and releases so that health checks and rollback are built in and every run produces its compliance evidence.\nPut National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls in place, and keep authorization and continuous monitoring evidence up to date.\nUse Python, and Bash when appropriate, to automate the work; speed it up with AI-assisted tools; and improve the quality of everything that ships.\nEvery pipeline you deliver enforces the required controls and hands release review the evidence it needs. You strip every manual step from the release path and build progressive delivery with automatic health checks and rollback, until a deployment is a non-event.\nThis is where you start, not the shape of your career here.\nRequirements\n4+ years of experience in DevSecOps or platform engineering\nA bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline\nPractical experience creating security-gated CI/CD pipelines in AWS-native tools (CodeBuild, CodePipeline) or in comparable tools (GitLab CI, GitHub Actions)\nA background in standing up Kubernetes clusters and running them\nPractical work containerizing applications and creating Docker images, plus infrastructure as code in CloudFormation or Terraform\nVulnerability scanning, along with automated security testing like SAST, DAST, and SCA\nAbility to program and script in Python (Bash skills a plus)\nProficiency working in Linux operating systems and writing shell scripts\nStrong knowledge of networking, including routing and load balancing, along with application programming interfaces and the way web applications are architected\nUsing Git to track and manage versions\nA background in both logging and monitoring\nExperience generating code, reviewing it, and validating it with AI-assisted development tools, for example GitHub Copilot\nProficiency in writing, PowerPoint, and Excel\nPreferred\nPrior work in information technology for the federal government\nA background in secrets management using tools such as AWS Secrets Manager, HashiCorp Vault, or a similar product\nA federal security background covering NIST SP 800-53 control implementation, Authority to Operate (ATO) support, and support for Federal Information Security Modernization Act (FISMA) compliance\nCertification from AWS\nWho you are\nFrom day one, security and reliability are part of your work, since a federal environment leaves no room to treat them as afterthoughts. You replace other people's manual work with automation and leave an audit trail as you go. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.\nWhat you bring\nHands-on, owner-level work on assigned CI/CD pipelines built with AWS-native or comparable tools, plus the Docker containerization, infrastructure as code, and Kubernetes clusters used to deploy real systems in AWS or in on-premises environments that clients manage.\nCommand of Linux in practice, and of how web applications interact with networks, so you can trace faults below the pipeline.\nPipeline security skills, among them least-privilege design, secrets management, vulnerability scanning, and automated security testing (SAST, DAST, SCA).\nPython scripting that reaches past pipeline configuration, backed by Bash, to automate whatever the tools leave out.\nJudgment fit for building in settings that demand security and auditability.\nYou adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own. You give the tools clear context, review and test their output, and remain accountable for the code you deliver.\nWhen we talk\nBe prepared to discuss a difficult problem you worked through, the decisions you made, what happened, and what you learned. The technical assessment is a Python coding exercise.\nBenefits\nThis is a full-time W-2 position with a salary of $120,000 to $140,000 per year.\nBenefits include medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) with an employer match of up to 4% of salary; unlimited paid time off; and sponsored professional certifications and continuing education.\nWhat we offer\nYou will work alongside developers, engineers, data scientists, architects, and strategists, on work ranging from strategy to implementation. We support your development across assignments and clients through extensive onboarding, sponsored professional certifications such as the Data Management Capability Assessment Model (DCAM) and AWS technical certifications, and rotation across functions to expand your skills and perspective. The mission is real, the problems are hard, and you own what you ship.\nWhat we commit to\nAs a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.\nWe hire people who want to help build the firm, not just work at it. If that is you, apply.\nPeregrine Advisors is an equal opportunity employer.\nPeregrine exclusively works with OPEN Data Jobs to recruit our team. Register with OPEN Data Jobs to be considered for this and future openings.","description_format":"text","description_chars":8666,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Hybrid work","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Recruiting & Staffing","Job Boards & Aggregators"],"lifecycle":[{"event":"open","at":"2026-10-30T23:15:12Z"}],"visa":[],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.839,"p_room":1,"age_days":3,"expected_fill_days":10,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/open-data-jobs-devsecops-engineer-kubernetes-cicd","json_url":"https://alion.io/job/open-data-jobs-devsecops-engineer-kubernetes-cicd.json","meta":{"generated_at":"2026-11-04T04:55:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7628,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679417},"rest":"https://alion.io/mcp/rest/get_company?id=679417"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fopen-data-jobs-devsecops-engineer-kubernetes-cicd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fopen-data-jobs-devsecops-engineer-kubernetes-cicd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fopen-data-jobs-devsecops-engineer-kubernetes-cicd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/open-data-jobs-devsecops-engineer-kubernetes-cicd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fopen-data-jobs-devsecops-engineer-kubernetes-cicd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3552472}},{"tool":"search_jobs","arguments":{"company":"opendatajobs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3552472},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}