Senior DevSecOps Engineer

Role : Senior DevSecOps Engineer

Location : Mechanicsburg,PA

Duration : 8+ month (extendable)

Work Location : Hybrid with two days onsite (1920 Technology Parkway, Mechanicsburg,PA 17050). Schedule can be discussed during interview.

Job Description : Role summary

• Hands-on security automation for AWS delivery. Build secure-by-defaultCDK constructs and CloudFormation templates, wire them into CI / CD, andenforce compliance checks that map to CJIS and NIST. Azure support is afuture consideration, not a core day-one duty.
• Scope boundaries
• Does not own enterprise AWS Organizations or SCP operations.
• Designs and builds reference guardrails and enforcement patterns thatcan be deployed by enterprise teams.
• Focuses on preventive controls and compliance automation, not incidentresponse.
• What you will deliver
• First 90 days
• Pipeline security templates in GitHub Actions and Azure DevOps withSAST, SCA, IaC, container, and secret scanning gates.
• Compliance as code in reference accounts : AWS Config rules and SecurityHub standards aligned to CJIS and NIST 800-53, with exceptionsworkflow documented.
• IaC reference modules using AWS CDK and CloudFormation for IAMleast privilege, KMS, Secrets Manager, logging, and network baselines;Terraform equivalents provided where teams require them.
• Evidence exports tying checks to control IDs and producing auditor-readyartifacts.
• Ongoing
• Harden CDK / CFT modules and pipeline templates as compliance needsevolve.
• Coach pilot teams to adopt templates.
• Raise gaps to enterprise teams for org-level enforcement.

Day-to-day responsibilities

Required skills

Nice to have

Decision rights

Required / Desired Skills :