{"id":3627316,"url":"https://alion.io/job/sprezzatura-senior-devsecops-engineer-2","title":"Senior DevSecOps Engineer","company":{"id":3908096,"name":"Sprezzatura","domain":"sprezzmc.com","url":"https://alion.io/company/sprezzatura-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":150000,"max":170000,"currency":"USD","period":"year","gross":null,"usd_annual":170000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Amazon CloudWatch","optional":true},{"name":"Kubernetes","optional":true},{"name":"SBOM","optional":true}],"status":"live","first_seen_at":"2026-11-02T19:59:48Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T10:34:29Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Position Title: Senior DevSecOps Engineer\nLocation: Remote (In the U.S)\nOther Considerations: U.S. Citizen or Permanent Resident (Required)\nPOSITION SUMMARY \nSprezzatura is seeking a Senior DevSecOps Engineer to serve as the technical security engineering lead supporting cybersecurity modernization for the Department of Veterans Affairs (VA).\nThe Senior DevSecOps Engineer will lead hands-on engineering efforts to identify and remediate security and control deficiencies across the platform's cloud infrastructure, CI/CD pipelines, shared platform services, and supporting systems. This position will help move the Platform toward a modern, engineering-first approach to cybersecurity by translating security requirements and identified control gaps into durable technical solutions.\nThis role will work closely with security and RMF personnel to translate control deficiencies, vulnerabilities, assessment findings, and Plans of Action and Milestones (POA&Ms) into actionable engineering work. The Senior DevSecOps Engineer will then lead or directly implement remediation through infrastructure, configuration, access policy, system rules, pipeline, and code changes.\nThe ideal candidate combines deep cloud and DevSecOps engineering experience with a strong understanding of cybersecurity, vulnerability remediation, secure software delivery, and federal security requirements. This individual should be comfortable operating as both a hands-on senior engineer and technical security SME in a complex, large-scale cloud environment.\nThis position will participate in a 24/7 on-call rotation.\nRESPONSIBILITIES\nServe as the team's senior technical security engineering lead and Security Engineering Subject Matter Expert (SME)\nLead hands-on remediation of security vulnerabilities, control deficiencies, and technical security debt across platform infrastructure and shared services\nTranslate security control requirements, assessment findings, vulnerabilities, and POA&Ms into actionable engineering solutions\nImplement security remediation through code, infrastructure, configuration, system rules, access policies, and other technical changes\nDesign, implement, and maintain automated security quality gates within GitHub Actions and platform CI/CD pipelines\nIntegrate and improve capabilities including SAST, DAST, Software Composition Analysis (SCA), secrets detection, dependency scanning, and other automated security checks\nDevelop and maintain secure configuration baselines for cloud infrastructure and Platform components\nImplement and improve centralized secrets management and secure credential-handling practices\nLead vulnerability remediation efforts across AWS infrastructure, containers, applications, dependencies, CI/CD pipelines, and shared Platform components\nProvision, secure, and sustain resilient CI/CD runner infrastructure within VA cloud environments\nImplement automation supporting patching, vulnerability remediation, and security configuration management\nImprove security logging, monitoring, and alerting capabilities to support timely detection and response to security events\nIntegrate Platform systems with security monitoring and telemetry capabilities, including applicable CSOC and continuous-monitoring requirements\nConfigure and improve cloud-native security capabilities such as AWS GuardDuty, AWS Security Hub CSPM, and related AWS security services\nLead or support technical implementation associated with DAST/WASA, SAST, secrets detection, and runtime security\nPartner with RMF and security personnel to determine appropriate technical remediation for NIST SP 800-53 control deficiencies\nPartner with the Security Automation Engineer to ensure implemented controls generate reliable security evidence and measurable security posture data\nProvide hands-on technical guidance to VA.gov product and engineering teams implementing security requirements\nLead technical planning and requirements definition when remediation requires coordination across multiple systems or engineering teams\nDocument implemented security controls, technical remediation, architecture decisions, and operational procedures necessary to sustain improvements\nParticipate in technical reviews, incident response, troubleshooting, and a 24/7 engineering on-call rotation as required\nQUALIFICATIONS\nBachelor's degree and 10+ years of relevant experience, or equivalent combination of education and experience \nSignificant hands-on experience in DevSecOps, cloud infrastructure, platform engineering, Site Reliability Engineering, or security engineering\nAdvanced experience with AWS, preferably including experience supporting complex production cloud environments\nStrong experience designing, implementing, and maintaining CI/CD pipelines, preferably using GitHub Actions\nExperience implementing security controls through infrastructure-as-code, configuration management, automation, or software development\nExperience with vulnerability identification, prioritization, remediation, and validation\nExperience implementing or operating application and infrastructure security tooling, including SAST, DAST, SCA, secrets detection, container scanning, or comparable capabilities\nExperience with infrastructure-as-code and configuration management technologies\nStrong knowledge of cloud security, IAM, secrets management, network security, logging, monitoring, and secure configuration practices\nExperience working with containerized workloads and modern cloud-native architectures\nProficiency with one or more scripting or programming languages used for infrastructure and security automation\nAbility to troubleshoot complex production infrastructure and security issues across multiple layers of a technology stack\nAbility to communicate technical security risks and remediation approaches to engineering, security, product, and program stakeholders\nAbility to obtain and maintain the background investigation and access required to support Department of Veterans Affairs systems\nAbility to participate in a 24/7 on-call rotation\nPREFERRED QUALIFICATIONS\nExperience supporting federal systems operating under the NIST Risk Management Framework (RMF)\nKnowledge of NIST SP 800-53 Rev. 5 security controls and experience translating control requirements into technical implementations\nExperience supporting systems operating at FISMA Moderate or High impact levels. \nExperience with AWS GovCloud or VA Enterprise Cloud (VAEC) environments\nExperience with AWS Security Hub, GuardDuty, IAM, CloudTrail, CloudWatch, or comparable cloud security capabilities\nExperience developing or maintaining GitHub Actions runners and secure CI/CD execution infrastructure\nExperience with Kubernetes, containers, and container security\nExperience with Software Bill of Materials (SBOM) generation and software supply-chain security\nExperience with continuous monitoring, security telemetry, or integration with enterprise security operations capabilities\nExperience remediating findings resulting from security assessments, vulnerability scans, penetration testing, WASA/DAST, or similar activities\nFamiliarity with federal ATO processes, POA&Ms, control implementation evidence, and independent controls assessments\nExperience serving as a technical lead or SME responsible for coordinating security engineering work across multiple teams\nWORKING CONDITIONS\nStandard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Travel may be required from time to time for customer meeting and industry events.\nPAY RANGE\nThe base salary range for this position is $150,000 to $170,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.\nBENEFITS\nSprezzatura offers a comprehensive and flexible benefit package to include:\nMedical, Dental, and Vision\nHealth Saving Account (when enrolled in eligible plan) with Company contribution \nCompany paid Life, Accidental Death, Short-term & Long-term Disability\nVoluntary Accident, Hospital Indemnity, & Critical Care Insurance\nVoluntary Medical & Dependent Care Flexible Spending Accounts\nAccrued Paid Time Off & Company Paid Holidays\n401(k) Retirement Plan with Company match\nWORK AUTHORIZATION\nSprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.\nSprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve-delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity-turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.\nCLEARANCE REQUIREMENT\nThis position may require Public Trust clearance. Candidates must undergo a background investigation, including a review of employment history, education, criminal record, and financial history. The clearance process ensures that the candidate is reliable, trustworthy, and of good conduct and character. Employment offers are contingent upon successful passing a public trust clearance process.\nEEO STATEMENT\nSprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.\nThis job description is not intended to be an employment contract and does not guarantee employment for any specific duration.","description_format":"text","description_chars":10383,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","DevOps & Platform Engineering","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-11-02T19:59:48Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":170000,"is_top_pay":true},"html_url":"https://alion.io/job/sprezzatura-senior-devsecops-engineer-2","json_url":"https://alion.io/job/sprezzatura-senior-devsecops-engineer-2.json","meta":{"generated_at":"2026-11-04T13:34:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20468,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908096},"rest":"https://alion.io/mcp/rest/get_company?id=3908096"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsprezzatura-senior-devsecops-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsprezzatura-senior-devsecops-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsprezzatura-senior-devsecops-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sprezzatura-senior-devsecops-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsprezzatura-senior-devsecops-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3627316}},{"tool":"search_jobs","arguments":{"company":"sprezzmc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3627316},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}