# DevSecOps at SteerBridge > Hybrid · United States · Unspecified · Other · open. Source: https://alderhq.app/jobs/lever%3Asteerbridge%3Aef6054c8-5abc-4ac7-baac-b3a00e116eec (read 2026-11-06). ## Facts (observed) - Company: [SteerBridge](https://alderhq.app/companies/steerbridge) - Location text: Vienna, VA - Where it can be done from (inferred): Hybrid · United States (evidence: "Location: Vienna, VA") - Posted: 2026-09-25 (42 days ago) - First seen by alder: 2026-11-02 · last verified: 2026-11-04 - Reposted: 0 times · edited: 0 times - Apply on the employer's site: https://jobs.lever.co/steerbridge/ef6054c8-5abc-4ac7-baac-b3a00e116eec - Skills listed (inferred): AWS, Docker, Terraform ## Pay and sponsorship - Posted pay: $125k–$170k per year (from the listing's pay field) - Market band for similar posted roles (United States, n 21705): p25 $56k, median $90k, p75 $155k ## Description (the employer's text) SteerBridge is a modern technology company delivering innovative, mission‑focused solutions to the U.S. Government and private sector. Leveraging deep expertise in federal acquisition, digital transformation, and emerging technologies, we deliver agile, commercial‑grade capabilities that accelerate operational effectiveness and drive measurable mission success. At the core of SteerBridge is our people—especially the veterans whose leadership, problem‑solving mindset, and commitment to excellence elevate every project we support. We don’t simply hire exceptional talent; we cultivate it, creating meaningful career pathways for veterans, military spouses, and professionals who share our passion for advancing technology and strengthening the missions we serve. POSITION OVERVIEW SteerBridge is seeking a DevSecOps Engineer to own the security infrastructure and automation behind a mission-critical VA Disability Claims platform that supports Veterans and federal customers in AWS GovCloud. This role builds and runs the systems that security depends on: the log pipelines that feed our SIEM, the CI/CD and infrastructure-as-code pipelines that deploy every environment, and the scanning, patching, and security services deployed across our accounts. The engineer partners closely with our security team, which monitors the environment, triages alerts, and leads incident response. This role makes sure that team has complete, reliable data and working tools, and turns their requirements into code, guardrails, and pipelines that run automatically. The engineer will also work with cloud engineers, solutions and security architects, application developers, and program leadership. This is a hands-on role. The ideal candidate writes Terraform and pipeline code, onboards new log sources end to end, keeps security tooling deployed and healthy, and fixes the root cause when a pipeline, agent, or integration breaks. They are comfortable reviewing a merge request, debugging a broken data connector, and documenting how a control is implemented. This is a hybrid position based in Vienna, VA. Key Responsibilities Own end-to-end security log pipelines from AWS and SaaS sources into Microsoft Sentinel, including CloudTrail, VPC Flow Logs, DNS query logs, GuardDuty, WAF, identity provider, and zero-trust platform logs. Onboard and validate new log sources using native delivery paths, including data collection endpoints and rules, S3/SQS connectors, and vendor streaming; monitor pipeline health, ingestion gaps, data completeness, and parsing accuracy. Manage security log retention, centralization, and immutability in accordance with federal logging and compliance requirements. Own GitLab CI/CD pipelines used to plan and deploy Terraform and Terragrunt across multiple AWS GovCloud accounts and organizations. Implement and maintain CI/CD security controls, including IaC scanning, secrets detection, container image scanning, dependency and SBOM checks, least-privilege deployment roles, protected branches, approval rules, and secure state and secrets handling. Standardize secure container build and release practices for ECS and Fargate workloads, including immutable image tags, signed and scanned images, and ECR lifecycle policies. Maintain security baselines across cloud environments, including IAM Identity Center permission sets, least-privilege roles, encryption, network segmentation, zero-trust access through Zscaler ZPA/ZIA, and inline inspection using Palo Alto VM-Series. Document infrastructure security controls and maintain operational runbooks supporting NIST SP 800-53, RMF, and ATO activities. Required Qualifications Eligibility requirements: U.S. citizenship is required for this position under applicable federal contract requirements. Candidate must also be able to obtain and maintain the security clearance required for the role. 5+ years of hands-on experience in DevOps, cloud security, security engineering, or a related field, preferably within AWS environments. Strong experience with infrastructure as code, including Terraform, and familiarity with Terragrunt, policy-as-code, and IaC security scanning tools such as Checkov or tfsec. ### Benefits - Health insurance - Dental insurance - Vision insurance - Life Insurance - 401(k) Retirement Plan with matching - Paid Time Off - Paid Federal Holidays SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity—regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law. We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs. --- Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/lever%3Asteerbridge%3Aef6054c8-5abc-4ac7-baac-b3a00e116eec and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.