All remote jobs

DevSecOps Engineer

AI Summary
Oddball is seeking a DevSecOps Engineer to build and secure CI/CD pipelines for an enterprise data platform supporting a VA team. The role embeds automated security scanning, policy enforcement, secrets management, and Zero Trust practices into cloud release processes. It also supports continuous compliance and ATO evidence collection while partnering with cloud, data, and governance teams. Candidates should bring cloud DevSecOps experience, ideally with Azure, Terraform, Azure Key Vault, and security scanning tools. The position is contingent on contract award and may require meeting federal background investigation or clearance requirements.
Remote from
USA
Salary
USD 110k–145k / yr
Department
Cybersecurity
Employment
Full Time
Experience
Open level
Published
Apply before
7 Dec 2026
Listing views
47
Application actions
2
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

Opportunity details

About this role.

Oddball believes that the best products are built when companies understand and value the things they are working on. We value learning and growth and the ability to make a big impact at a small company. We believe that we can make big changes happen and improve the daily lives of millions of people by bringing quality software to the federal space.

This position is contingent upon contract award.

We’re looking for a DevSecOps Engineer to join our VA team, building and securing the pipelines that deliver an enterprise data platform.

What you’ll be doing:

  • Build and maintain CI/CD pipelines for platform releases
  • Embed automated security scanning and policy enforcement into every release
  • Harden pipelines and manage deployment credentials and secrets safely
  • Apply Zero Trust principles and policy-as-code across the platform
  • Support continuous compliance and ATO evidence collection
  • Partner with cloud, data, and governance teams to keep releases secure and compliant

What you’ll bring:

  • DevSecOps experience building CI/CD pipelines in cloud environments, ideally Azure
  • Experience with automated code, dependency, container, and secrets scanning
  • Secrets management experience, such as Azure Key Vault
  • Infrastructure as code experience with Terraform or similar
  • Familiarity with FISMA, NIST 800-53, and RMF is a plus
  • Thrives in a remote, collaborative Agile environment and genuinely enjoys working across cloud and security teams
  • Communicates clearly and openly, whether writing up a control or working through a pipeline issue with engineers
  • Perform other related duties as assigned

Requirements:

  • Applicants must be authorized to work in the United States. In alignment with federal contract requirements, certain roles may also require U.S. citizenship and the ability to obtain and maintain a federal background investigation and/or a security clearance.

Education:

  • Bachelor’s Degree

Benefits:

  • Fully remote
  • Tech & Education Stipend
  • Comprehensive Benefits Package
  • Company Match 401(k) plan
  • Flexible PTO, Paid Holidays

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities:

Oddball is an Equal Opportunity Employer and does not discriminate against applicants based on race, religion, color, disability, medical condition, legally protected genetic information, national origin, gender, sexual orientation, marital status, gender identity or expression, sex (including pregnancy, childbirth or related medical conditions), age, veteran status or other legally protected characteristics. Any applicant with a mental or physical disability who requires an accommodation during the application process should contact an Oddball HR representative to request such an accommodation by emailing hello@Oddball.io

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

At Oddball, we may use AI-assisted tools as part of our recruitment process to help review applications, verify applicant information, and identify potentially fraudulent submissions. These tools support our recruiting team in maintaining a fair and secure hiring process. AI-generated findings are reviewed by our recruiting team and are not used as the sole basis for hiring decisions.

Compensation:

At Oddball, it’s important each employee is compensated competitively and fairly. In alignment with state legal requirements. A range for the included position is listed below. Be advised, actual offer details are determined by job category, job location, and candidate skill level.

United States Wage Range: $110,000 – $145,000

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

4/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

4/5
GuidedFull ownership

Communication Load

4/5
IndependentCollaborative
AI insightThis is a senior-leaning technical role combining cloud delivery engineering with security automation and federal compliance expectations. Success requires practical ownership of secure pipelines as well as effective collaboration across engineering, governance, and security stakeholders.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate
$127,500
US market range (per year)$110k–$155k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer discloses a US wage range of $110,000–$145,000. Although no cadence is stated, the range is logically inferred to be annual base pay based on the US professional DevSecOps role and compensation magnitude. The estimated US market range for a comparable DevSecOps Engineer is $110,000–$155,000 per year.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you embed security controls into a CI/CD pipeline without creating unnecessary delivery friction?

I would implement automated checks at appropriate stages, including code, dependency, container, and secret scanning, with clear severity thresholds and actionable feedback. I would use policy-as-code for consistent enforcement, allow controlled exceptions with audit trails, and continuously tune rules to reduce false positives.

What is your approach to managing deployment secrets in Azure-based pipelines?

I would store secrets in Azure Key Vault, use managed identities or short-lived federated credentials where possible, and ensure pipelines retrieve secrets only at runtime. I would avoid storing credentials in repositories or pipeline variables, apply least-privilege access, rotate secrets, and monitor access events.

How have you used Terraform to improve security and compliance?

I use Terraform to make infrastructure changes repeatable and reviewable, with modules that include secure defaults. I add static analysis and policy checks to pull requests, require peer review, maintain state securely, and generate evidence from plans and deployments for compliance reporting.

How would you support ATO evidence collection through DevSecOps practices?

I would map pipeline controls and infrastructure configurations to relevant control requirements, then automate evidence capture from scans, approvals, build logs, configuration baselines, and access controls. The evidence should be versioned, traceable to releases, and readily available for governance and audit teams.

Describe how you would respond when a critical vulnerability is found in a release candidate shortly before deployment.

I would validate the finding and its exploitability, assess the affected component and deployment scope, and immediately communicate the risk to the relevant engineering and security stakeholders. Depending on severity, I would block the release, coordinate remediation or a documented risk decision, verify the fix through rescanning, and capture the incident and resolution for compliance records.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Add alert
Jobs Talent AI Tools Salaries
Menu