DevSecOps Engineer

📍 Arlington, Virginia · 🏛 Department of Homeland Security Headquarters · 💰 $121,785–$187,093 per year · 🎓 GS 13–14 · 🧭 Information Technology Management (2210) · ⏳ Closes Apr 25, 2027 · 165 days left · 🗓 Posted Oct 26, 2026
Browse: More Department of Homeland Security Headquarters jobs · More Information Technology Management jobs · Federal jobs in Virginia

Job details at a glance

AgencyDepartment of Homeland Security Headquarters
DepartmentDepartment of Homeland Security
LocationArlington, Virginia
Salary$121,785–$187,093 per year
GradeGS 13–14
ScheduleFull-time
Occupation seriesInformation Technology Management (2210), DHS Cybersecurity Specialist (For DHS use only) (2230)
Openings1
Hiring pathsCompetitive service, Excepted service
PostedOct 26, 2026
Application deadlineApr 25, 2027
Telework eligibleNo
Remote jobNo
Security clearanceNot Required
Relocation expenses reimbursedNo
Promotion potentialNone
Apply on USAJobs (official) ↗

About this job

6-12 month non-reimbursable assignment. The only compensation for this assignment is the federal salary you are already receiving. Cybersecurity Infrastructure Security Agency (CISA) DevSecOps Engineer Series Requested: 2210; 2230 Security Clearance: Public Trust Virtual/Remote: No Only current, full-time federal employees are eligible. Resumes are reviewed every 30 days until selection/closing date. This is a Detail, not a Developmental Rotation. Supervisory approval form must be signed.

Duties

Provides technical leadership for cloud and application security platforms including Prisma Cloud, Wiz, and Checkmarx. Conducts cloud security posture assessments, application security testing, container and Kubernetes security reviews, and vulnerability analysis. Evaluates and prioritizes security findings, reduces false positives, and delivers actionable remediation guidance to development and platform engineering teams Supports enterprise artifact management and GitOps-based deployment practices by securing software supply chains, managing binary repositories, implementing vulnerability scanning and signature verification, and ensuring secure synchronization of code and infrastructure across cloud-native environments. Collaborates with cross-functional stakeholders to strengthen cyber resilience, improve secure-by-design engineering practices, and advance organizational DevSecOps maturity. Provide enterprise DevSecOps, cloud security, and secure software delivery expertise across development, security, and operations teams. Leads the integration of automated security controls into CI/CD pipelines, ensuring the continuous enforcement of security policies through automated scanning, vulnerability management, and Infrastructure as Code (IaC) validation while maintaining development velocity. Administers and secures enterprise software development and delivery platforms, including GitHub, GitHub Actions, CloudBees/Jenkins, Artifactory, and ArgoCD. Develops, configures, and maintains secure build and deployment pipelines, repository governance, access controls, secrets management, and shared automation frameworks that enable consistent and compliant software releases.

Qualifications

Qualifications required: Expertise in integrating automated security controls, including SAST, DAST, SCA, and Infrastructure-as-Code scanning, into CI/CD pipelines while enabling rapid and secure software delivery. Experience with vulnerability management, security tool optimization, and software supply chain security practices is essential. Advanced proficiency administering and securing enterprise development platforms such as GitHub, GitHub Actions, CloudBees/Jenkins, JFrog Artifactory, and ArgoCD. This includes implementing repository governance, secrets management, access controls, build automation, GitOps workflows, and artifact security. Strong experience with Terraform, CloudFormation, Kubernetes, containers, and cloud environments is required to support secure cloud and application deployment practices. Hands-on experience with cloud and application security platforms such as Wiz, Prisma Cloud, and Checkmarx, including cloud security posture management, application security testing, and container security. Should be capable of serving as a technical lead, providing strategic guidance to development and security teams, advancing secure-by-design principles, and driving enterprise-wide improvements in DevSecOps maturity and software supply chain resilience Please read the following important information to ensure we have everything we need to consider your application: It is your responsibility to ensure that you submit appropriate documentation prior to the closing date. Your resume serves as the basis for qualification determinations and must highlight your most relevant and significant experience as it relates to this Joint Duty assignment opportunity announcement. Be clear and specific when describing your work history since human resources cannot make assumptions regarding your experience. Your application will be rated based on your resume. Please ensure EACH work history includes ALL of the following information: Job Title (Include series and grade of Federal Job) Duties (Be specific in describing your duties) Name of Federal agency Supervisor name, email, and phone number Start and end dates including month and year (e.g. June 2007 to April 2008)

Education

EDUCATIONAL SUBSTITUTION: There is no educational substitution for this position.

Evaluations

We will review your resume and supporting documentation to ensure you meet the basic qualification requirements. If you meet the minimum qualifications, your experience, education, and training will be rated using a job questionnaire based on the competencies or knowledge, skills, and abilities needed to perform this Joint Duty Assignment. If you are among the best qualified, you may be referred to the hiring manager for consideration and may be called for an interview. After reviewing your resume and supporting documentation, a determination will be made. You must submit the supporting documents listed under the required documents section of this announcement.

How to apply

All applicants are encouraged to apply online. To apply for this position, you must complete the questionnaire and submit the documentation specified in the Required Documents section. The complete application package must be submitted by 11:59 PM (ET) on 04/25/2027 to receive consideration. To begin, click Apply Online to create a USA JOBS account or log in to your existing account. Follow the prompts to select your USA JOBS resume and other supporting documents, and complete the questionnaire. Click Submit My Answers to submit your application package. NOTE: It is your responsibility to ensure your responses and appropriate documentation is submitted prior to the closing date. To verify your application is complete, log into your USAJOBS account, https://my.usajobs.gov/Account/Login, select the Application Status link, and then select the more information link for this position. The Application page will display the status of your application, the documentation received and processed, and any correspondence the agency has sent related to this application. Your uploaded documents may take several hours to clear the virus scan process. To return to an incomplete application, log into your USAJOBS account and click Update Application in the vacancy announcement. You must re-select your resume and/or other documents from your USAJOBS account or your application will be incomplete.

Applications are handled only on the official announcement. This page is a readable copy of the public announcement data — the official version controls if anything differs.

Apply on USAJobs (official) ↗

Required documents

1. Resume: Do not include any personally identifiable information (PII) i.e., home address, social security number, or date of birth. Your resume must clearly demonstrate you have experience which meets the requirements of this position as outlined in the "Qualifications" section. 2. SF-50: Submit a copy of your official SF-50 (no text version) or other official "Notification of Personnel Action" document which shows the following information: Your appointment in the Federal service Tenure Grade and Step Full performance level If your SF-50(s) does not provide the information needed to make a final determination for qualification, you will be found ineligible for the position. 3. DHS Joint Duty Assignment Application Form signed by your supervisor. Please click on the following link to access the required form DHS Form 250-02.

What to expect next

Once you submit your application, we will assess your experience and training, identify the best qualified applicants, and refer those applications to the selecting official for further consideration and a possible interview. We will notify you by email at various stages in the process. Your status will also be updated on USAJOBS throughout the process. To check your status, log on to your USAJOBS account, click on "Application Status," and then click "More Information." We expect to make a final JDA offer within 90 days after the deadline for applications. If you are selected, we will conduct a suitability/security background investigation. Telework: Telework eligibility is based on the needs of the office and is subject to change. Additional information pertaining to your interest and availability for this position may be needed after the closing date of the Joint Duty Assignment vacancy announcement; therefore, a timely response to these requests must be adhered to in order to remain in consideration.

Other information

**DHS does not offer any additional benefits beyond that which the Federal employee is already receiving. If the position requires a security clearance, employees must have a SECRET or TOP SECRET clearance to placement AND must maintain that level of clearance while performing in the position. Selected applicants for a JDA are requested to fulfill the items below during the JDA: Complete the DHS Training Course 15 days prior to the arrival to the JDA. Complete the DHS Joint Duty Assignment Progress Plan to include: Phase 1: Establish assignment objectives within the first 30 days of the JDA. Phase 2: Complete a self-assessment of the duties performed at the mid-point of the JDA. Phase 3: Complete a final review within the last 30 days of the JDA.

Frequently asked questions

How much does this DevSecOps Engineer job pay?

The announcement lists a salary of $121,785–$187,093 per year (GS 13–14).

When is the last day to apply?

Applications close on Apr 25, 2027 — 165 days from today.

Where is this job located?

This position is located in Arlington, Virginia with the Department of Homeland Security Headquarters.

How do I apply?

Applications are submitted through the official announcement on USAJobs. Use the Apply button on this page to go to the official posting — this site never takes applications itself.

More jobs at Department of Homeland Security Headquarters

All Department of Homeland Security Headquarters jobs →

More Information Technology Management jobs

All Information Technology Management jobs →

Data: USAJobs (U.S. Office of Personnel Management), retrieved 2026-11-11 · Announcement JDP-13101621-26-DJ · Official announcement. FederalJobs is unofficial and is not affiliated with OPM or the agency.
DevSecOps Engineer
Apr 25, 2027 deadlineApply