Senior DevSecOps Engineer

Synergy is hiring a Senior DevSecOps Engineer to design, secure, and optimize cloud-native application platforms in AWS and Kubernetes environments. The role leads CI/CD, infrastructure-as-code, container deployment, and security automation, while partnering across teams to deliver compliant, scalable solutions and providing technical leadership and mentorship.

Responsibilities:

• Design, implement, and maintain secure, scalable cloud infrastructure and containerized application platforms in AWS and Kubernetes environments
• Develop, manage, and optimize CI/CD pipelines to support automated, reliable, and secure software delivery
• Implement Infrastructure as Code (IaC) solutions using tools such as Terraform and Helm
• Integrate security controls into the software development lifecycle, including vulnerability scanning, compliance monitoring, and remediation activities
• Manage and secure Kubernetes (EKS) environments, container registries, and cloud-native application deployments
• Implement and maintain identity, access management, and authentication solutions using enterprise standards and technologies
• Troubleshoot and resolve complex issues across applications, containers, cloud infrastructure, networking, operating systems, and CI/CD pipelines
• Apply zero-trust security principles, least-privilege access controls, and network segmentation practices
• Assess cloud architecture, performance, security, and cost efficiency, incorporating FinOps principles where appropriate
• Collaborate with developers, security teams, architects, and customers to translate mission and business requirements into technical solutions
• Lead technical discussions, provide engineering guidance, and support architecture and design decisions
• Mentor junior engineers, conduct code and configuration reviews, and promote DevSecOps and engineering best practices
• Support compliance and security requirements within regulated or government environments, including Platform One and Iron Bank ecosystems when applicable
• Continuously improve developer experience, operational efficiency, automation, and deployment processes

Requirements:

• 4-6+ years of relevant experience in DevSecOps, DevOps, cloud engineering, software engineering, infrastructure engineering, or related technical roles
• Strong experience maintaining and supporting containerized application environments and CI/CD pipelines
• Experience with Docker, Kubernetes, and cloud-native deployment patterns
• Experience deploying and managing AWS infrastructure using Infrastructure as Code tools such as Terraform and Helm
• Experience with AWS services including EKS, IAM, networking, and directory or identity services
• Experience evaluating application and container vulnerabilities, determining risk and applicability, documenting findings, and implementing remediation when required
• Experience integrating security into CI/CD pipelines, including technologies such as SAST, DAST, dependency scanning, container scanning, and related security controls
• Experience with DoD Platform One concepts and tooling, including Iron Bank or similar hardened container ecosystems
• Experience securing and hardening application environments using zero-trust principles, least privilege, network segmentation, and secure service-to-service communication
• Experience implementing authentication and authorization using standards such as OIDC and SAML with enterprise identity providers or identity proxies
• Strong understanding of Linux systems, networking, containers, and virtualization technologies
• Ability to understand application architecture and application code at a high level, including the ability to follow application logic, pseudocode, configuration, and common frameworks such as Node.js
• Ability to independently troubleshoot issues across applications, containers, operating systems, networking, CI/CD pipelines, cloud infrastructure, and identity systems
• Experience improving developer workflows, simplifying deployment processes, and reducing unnecessary complexity within CI/CD and application delivery environments
• Ability to evaluate cloud architecture and infrastructure decisions with cost awareness and apply FinOps principles when designing or maintaining solutions
• Ability to lead cross-functional technical discussions, identify customer pain points, and translate business or mission needs into actionable technical requirements
• Experience mentoring engineers, conducting code reviews, and promoting secure coding, automation, and engineering best practices
• Ability to attain a Federal Government Position of Trust
• Must be a U.S. citizen
• Hands-on experience supporting applications within DoD, federal government, or other highly regulated environments
• Experience with Platform One, Iron Bank, Harbor, GitLab, Jenkins, Argo CD, or similar DevSecOps platforms
• Experience with service mesh, mTLS, PKI, certificate management, or enterprise identity integration
• Experience with AWS Managed Microsoft AD, Active Directory, LDAP, or Kerberos integrations
• Experience with Helm chart development and Kubernetes application lifecycle management
• Familiarity with NGINX, ingress controllers, reverse proxies, and application networking
• Experience with SQL databases and troubleshooting application-to-database connectivity
• Relevant AWS, Kubernetes, security, Linux, or cloud certifications
• Bachelor's degree preferred
• Work Experience + relevant certifications may be considered in lieu of degree