Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
DevSecOps Engineer
- Remote from
- USA
- Salary
- USD 110k–145k / yr
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Open level
- Published
- Apply before
- 7 Dec 2026
- Listing views
- 47
- Application actions
- 2
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
About this role.
Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.
This position is contingent upon contract award.
We’re looking for a DevSecOps Engineer to join our VA team, building and securing the pipelines that deliver an enterprise data platform.
What you’ll be doing:
- Build and maintain CI/CD pipelines for platform releases
- Embed automated security scanning and policy enforcement into every release
- Harden pipelines and manage deployment credentials and secrets safely
- Apply Zero Trust principles and policy-as-code across the platform
- Support continuous compliance and ATO evidence collection
- Partner with cloud, data, and governance teams to keep releases secure and compliant
What you’ll bring:
- DevSecOps experience building CI/CD pipelines in cloud environments, ideally Azure
- Experience with automated code, dependency, container, and secrets scanning
- Secrets management experience, such as Azure Key Vault
- Infrastructure as code experience with Terraform or similar
- Familiarity with FISMA, NIST 800-53, and RMF is a plus
- Thrives in a remote, collaborative Agile environment and genuinely enjoys working across cloud and security teams
- Communicates clearly and openly, whether writing up a control or working through a pipeline issue with engineers
- Perform other related duties as assigned
Requirements:
- Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.
Education:
- Bachelor’s Degree
Benefits:
- Fully remote
- Tech & Education Stipend
- Comprehensive Benefits Package
- Company Match 401(k) plan
- Flexible PTO, Paid Holidays
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities:
Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing hello@Oddball.io
The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)
At Oddball, we may use AI-assisted tools as part of our recruitment process to help review applications, verify applicant information, and identify potentially fraudulent submissions. These tools support our recruiting team in maintaining a fair and secure hiring process. AI-generated findings are reviewed by our recruiting team and are not used as the sole basis for hiring decisions.
Compensation:
At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.
United States Wage Range: $110,000 – $145,000
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would implement automated checks at appropriate stages, including code, dependency, container, and secret scanning, with clear severity thresholds and actionable feedback. I would use policy-as-code for consistent enforcement, allow controlled exceptions with audit trails, and continuously tune rules to reduce false positives.
I would store secrets in Azure Key Vault, use managed identities or short-lived federated credentials where possible, and ensure pipelines retrieve secrets only at runtime. I would avoid storing credentials in repositories or pipeline variables, apply least-privilege access, rotate secrets, and monitor access events.
I use Terraform to make infrastructure changes repeatable and reviewable, with modules that include secure defaults. I add static analysis and policy checks to pull requests, require peer review, maintain state securely, and generate evidence from plans and deployments for compliance reporting.
I would map pipeline controls and infrastructure configurations to relevant control requirements, then automate evidence capture from scans, approvals, build logs, configuration baselines, and access controls. The evidence should be versioned, traceable to releases, and readily available for governance and audit teams.
I would validate the finding and its exploitability, assess the affected component and deployment scope, and immediately communicate the risk to the relevant engineering and security stakeholders. Depending on severity, I would block the release, coordinate remediation or a documented risk decision, verify the fix through rescanning, and capture the incident and resolution for compliance records.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
