Haystack
← Back to Jobs
Remote
Technology

DEVSECOPS & EVIDENCE-AUTOMATION ENGINEER

Zermount Inc.Arlington, VA🇺🇸United StatesPosted 17 Aug 2026

Why This Role Stands Out

Leverage your expertise to build cutting-edge CI/CD security pipelines and automate evidence collection for critical government programs, with a competitive salary of $145,000-$175,000 and the flexibility of a 100% remote role. This mid-senior opportunity is ideal for a detail-oriented engineer skilled in AWS, Python, Go, and CI/CD tools, offering significant impact and professional growth. Apply now to join a dynamic team and revolutionize federal security operations.

Quick Overview

Salary
$145k - $175k/yr
Work Type
Remote
Level
Mid Senior

Job Description

DevSecOps & Evidence-Automation Engineer

Position Overview

We are looking for a highly talented, technical, hands-on DevSecOps & Evidence-Automation Engineer to help accelerate our growing Professional Services business within the Government Sector. This is a 100% remote position. You will build the CI/CD security pipeline and the automated evidence collectors that shift a federal continuous Authorization to Operate (cATO) program from periodic, manual evidence collection to near-real-time, machine-generated control evidence.

Duties & Responsibilities
  • CI/CD Security Pipeline: Build and operate a pipeline (SAST, DAST, SCA, container scanning, SBOM, secrets) integrated across source, build, test, release, deploy, and runtime.
  • Evidence Automation: Write evidence collectors (Python/boto3, serverless functions, Go) that pull cloud, scanner, and SIEM data and map it to security controls (NIST SP 800-53).
  • Source-Control Governance: Establish review gates and attestation formats.
  • Integration: Build and maintain API/connector integrations and event-driven data flows feeding the evidence and GRC layer.
  • Identity & Secrets: Engineer identity, PKI, and secrets workflows (HashiCorp Vault, AWS Secrets Manager) supporting control evidence.

Qualifications
  • High level of attention to detail, needs minimal guidance, effective verbal and written communication.
  • 7+ years building cloud-native, event-driven services and automation on AWS (serverless, Terraform/IaC, Docker).
  • Strong in Go and/or Java (Spring Boot); Apache Kafka or equivalent event streaming.
  • CI/CD pipeline engineering (Jenkins/GitHub Actions) and infrastructure-as-code.
  • PKI/X.509 and secrets-management engineering (HashiCorp Vault, AWS Secrets Manager).
  • Ability to map technical evidence to security controls (NIST SP 800-53).
  • SBOM generation and container signing a plus.

Education
  • Bachelor of Science (or higher) in computer engineering, computer science, information technology, cyber security, or a related field.
  • Another major will be considered, provided it clearly addresses at least one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems, or information technology.

Clearance Level
  • No Clerance required, but an active Secret Clearance is preferred.

Work Location
  • Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.

Hours of Operation
  • 6:00 am ET - 6:00 pm ET

SALARY RANGE
  • $145,000-$175,000
  • Ability to pass a minimum background investigation.

Skills

Docker
Spring
Spring Boot
AWS
Apache
GitHub Actions
Java
Jenkins
Kafka
PKI
Python
Terraform
Vault

Similar jobs

Browse related jobs

Apply now