Junior DevSecOps Engineer

About Peregrine

Peregrine Advisors is a rapidly growing AI and data innovation hub helping government solve hard problems and deliver better outcomes. We work across the full lifecycle-from strategy and governance through architecture, engineering, analytics, AI, visualization, and training-for clients including the SEC, PCAOB, DDOT, and DCAA.

Our clients describe our support as “absolutely excellent” and our people as “instrumental to organization’s success.” Winner of the United Nations COP27 Datathon, our work has earned all Exceptional CPARS ratings, SEC Chair’s Awards, the SEC Vision Award, and recognition from FDA leadership.

We are also built differently. Peregrine is the first and only social enterprise organized as a Benefit Corporation and SBA 8(a) company focused on AI and data for government. We believe business success should create client value, social value, and opportunity for our people.

As we enter our next stage of growth, we need dependable, motivated, and skilled people who have a combination of intellectual curiosity and intellectual courage. With new clients, larger programs, and expanding responsibilities, the people joining Peregrine now will have the opportunity to help shape the company we become.

People first. Ownership always.

We solve problems through people, process, and technology-in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation come before competence. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else.

At Peregrine, you are not joining simply to fill a position. You are joining a team, taking ownership of a mission, and helping build a company. If that excites you, we should talk.

At Peregrine Advisors, you will help build and operate the secure delivery pipelines that carry federal systems into production. But we hire people, not seats. As the work evolves, you will learn new systems and tools, take on greater responsibility, and help develop the firm's capabilities, tools, and lines of business. We move our best to where the hardest problems are.

This is a full-time W-2 position with a salary of $80,000 to $95,000 per year. It is a hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement is expected to be one to two days a week on site in DC. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.

Your first project

Your first project will likely have you working alongside engineers on the pipelines a team relies on every day. Depending on the assignment, you may:

• Build and maintain pipelines whose builds, tests, and deployments are routine rather than events.
• Add automated security testing, including static and dynamic application security testing and software composition analysis, to the delivery path.
• Set up monitoring and logging, and map controls to National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53).
• Chase down security and reliability findings, and fix them.

Your work goes through code review, and you explain what you changed and why. That is how you learn why a change is right rather than only that it works. You automate what the team does by hand, and you build your part of the practice that puts security in early rather than bolting it on.

This is where you start, not the shape of your career here.

Requirements

• 1+ years of software development, platform, or operations engineering experience
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Scripting ability (Python, Bash, or PowerShell)
• Working knowledge of continuous integration and continuous delivery (CI/CD) concepts, with hands-on experience in at least one pipeline tool
• Familiarity with cloud services on Amazon Web Services (AWS), and with Docker and containerization
• A basic understanding of container orchestration concepts
• Exposure to Infrastructure as Code (IaC) tools such as Terraform or CloudFormation
• Foundational experience with Linux operating systems
• Knowledge of computer networking concepts, application programming interfaces, load balancing, and web applications
• An understanding of cloud security principles and secure software delivery practices
• The ability to troubleshoot infrastructure and deployment-related issues
• Experience using artificial intelligence (AI)-assisted development tools such as GitHub Copilot for code generation and review
• Proficiency in writing, PowerPoint, and Excel

Preferred

• Exposure to Federal Information Security Modernization Act (FISMA) compliance, NIST SP 800-53 controls, or Authority to Operate (ATO) processes
• Vulnerability scanning or security tooling experience, such as static application security testing (SAST), dynamic application security testing (DAST), or policy-as-code
• Hands-on delivery of production workloads on Amazon Web Services (AWS), or an AWS certification
• Federal information technology experience

Who you are

You treat security and reliability as part of the build, not a gate at the end, and you are highly motivated to develop as an engineer who automates what others do by hand and leaves an audit trail behind. You ask when you are stuck rather than guessing, you take feedback as the fastest route forward, and when priorities shift, you shift with them. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• A foundation in scripting, Linux, networking, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.
• The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.
• The communication to say clearly what you have done, what you are stuck on, and what you need.
• The precision to work where accuracy and auditability are not optional.

You adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own. You give the tools clear context, review and test their output, and remain accountable for the code you deliver.

When we talk

Be prepared to discuss a difficult problem you worked through, the decisions you made, what happened, and what you learned.

Benefits

Medical, dental, and vision with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) matched 100% up to 4% of salary, vesting immediately; unlimited paid time off; and sponsored professional certifications and continuing education.

What we offer

You will work alongside developers, engineers, data scientists, architects, and strategists, on work ranging from strategy to implementation. We support your development across assignments and clients through extensive onboarding, sponsored professional certifications such as the Data Management Capability Assessment Model (DCAM) and AWS technical certifications, and rotation across functions to expand your skills and perspective. The mission is real, the problems are hard, and you own what you ship.

What we commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.

We hire people who want to help build the firm, not just work at it. If that is you, apply.

Peregrine Advisors is an equal opportunity employer.

Peregrine exclusively works with OPEN Data Jobs to recruit our team. Register with OPEN Data Jobs to be considered for this and future openings.