DevSecOps / Python Engineer

Overview

Edgewater Federal Solutions is seeking an experienced DevSecOps/Python Engineer.  The DevSecOps/Python Engineer provides senior technical leadership and hands-on engineering for secure software delivery, Python automation, cloud infrastructure, and CI/CD within a federal enterprise environment. The role establishes secure delivery standards, builds reusable automation and services, and integrates security throughout the software development lifecycle.

*Due to the nature of the work and contract - US Citizenship is required.

*This is a remote role.

Responsibilities

• Design, implement, and optimize Git-based CI/CD pipelines for Python and platform workloads using GitLab CI, GitHub Actions, or equivalent tools.
• Integrate SAST, DAST, SCA, secrets scanning, container scanning, SBOM generation, artifact signing, and security gates into delivery pipelines.
• Develop production-grade Python automation, APIs, services, and operational tooling using Python, FastAPI/Flask, REST, and scripting frameworks.
• Automate infrastructure and environment provisioning using Terraform, policy-as-code, GitOps, and configuration-as-code practices.
• Build and secure Docker/container deployment patterns using Kubernetes/ECS and integrate AWS IAM, networking, secrets, encryption, and logging controls.
• Lead secure design reviews, vulnerability remediation, production troubleshooting, incident root-cause analysis, technical mentoring, and continuous improvement.

Qualifications

• US Citizenship Required
• Must be able to obtain and maintain a Public Trust
• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Cloud Computing, or a related technical field.
• 10+ years of software engineering, DevSecOps, cloud, platform, or security engineering experience, including senior technical leadership responsibilities.
• Expert Python development skills, including FastAPI/Flask, REST APIs, automation, testing, packaging, logging, and secure coding practices.
• Strong CI/CD, Git, Terraform, Docker, Kubernetes/ECS, AWS, and automated security testing experience.
• Knowledge of OWASP, IAM/RBAC, Zero Trust, secrets management, encryption/TLS, observability, vulnerability management, and software supply-chain security.
• Experience supporting federal or regulated environments and familiarity with FISMA, NIST 800-53, FedRAMP, ATO, and continuous monitoring.
• Preferred certifications include AWS, CISSP/Security+, CKA/CKS, Terraform, Python, or comparable DevSecOps credentials.

Salary = $190,000 - $215,000

Working at Edgewater Federal Solutions:

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies since 2018.

Edgewater Federal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status and/or other status protected by applicable law. 

Responsibilities

- Design, implement, and optimize Git-based CI/CD pipelines for Python and platform workloads using GitLab CI, GitHub Actions, or equivalent tools.
- Integrate SAST, DAST, SCA, secrets scanning, container scanning, SBOM generation, artifact signing, and security gates into delivery pipelines.
- Develop production-grade Python automation, APIs, services, and operational tooling using Python, FastAPI/Flask, REST, and scripting frameworks.
- Automate infrastructure and environment provisioning using Terraform, policy-as-code, GitOps, and configuration-as-code practices.
- Build and secure Docker/container deployment patterns using Kubernetes/ECS and integrate AWS IAM, networking, secrets, encryption, and logging controls.
- Lead secure design reviews, vulnerability remediation, production troubleshooting, incident root-cause analysis, technical mentoring, and continuous improvement.