DevSecOps Engineer (Mid level - Top Secret - Remote US)

We are seeking an DevSecOps Engineer to support a federal client by helping integrate security practices into modern cloud and application development workflows. You will work alongside senior DevOps, security, and application teams to support CI/CD pipelines, cloud infrastructure, and automated security controls in alignment with federal standards.

Job Location: This is a fully remote role which may require occasional travel to the DC Metro area as needed for onsite client meetings.

What You Will Do:

• Assist in the development, maintenance, and monitoring of CI/CD pipelines using tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps

• Support infrastructure as code (IaC) efforts using tools like Terraform, CloudFormation, or ARM templates

• Help integrate security scanning and compliance checks into build and deployment pipelines (SAST, DAST, dependency scanning, container scanning)

• Support cloud infrastructure in AWS, Azure, or GCP, with an emphasis on security best practices

• Assist with containerization efforts using Docker and orchestration platforms such as Kubernetes

• Monitor environments, logs, and alerts; assist with troubleshooting and incident response

• Document configurations, processes, and security controls to support audits and compliance requirements

• Collaborate with development, operations, and security teams in an Agile/Scrum environment

• Learn and apply federal security frameworks such as NIST, FISMA, and FedRAMP

What You Will Bring:

• Must possess an active high level security clearance (TS).

• 2+ years of experience in DevOps, cloud engineering, systems engineering, or cybersecurity.

• MUST RESIDE IN THE United States (U.S.) and the work MUST BE PERFORMED in the United States (U.S.), as this work is for a federal contract and laws do apply.

• US Citizenship required due to a federal contract requirements.

What We Would Like You To Have:

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field

• Basic understanding of CI/CD concepts and DevOps practices

• Familiarity with at least one cloud platform (AWS, Azure, or GCP)

• Working knowledge of Linux and basic scripting (Bash, Python, or similar)

• Exposure to DevSecOps tools (e.g., SonarQube, Snyk, Trivy, Checkov, Aqua, Prisma Cloud)

• Experience with Docker and basic Kubernetes concepts

• Familiarity with NIST 800-53, FedRAMP, or other federal security standards

• Entry-level certifications such as AWS Cloud Practitioner, Azure Fundamentals, Security+, or similar

• Experience supporting applications in a regulated or government environment

#LI-CC1

#Indeed

#ICFCleared

Bot and Third-Party Applications

Please note that this application must be submitted directly by the applicant for consideration. Failure to do so may result in the application being excluded for consideration.  Applicants needing an accommodation for disability or religious purposes in connection with the application process should contact 

Candidateaccommodation@icf.com

 for assistance.

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

 

 

Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is:

$89,649.00 - $184,409.00

Nationwide Remote Office (US99)