_(1).png?1707857818)
Lead DevSecOps/.NET Security Engineer
POSITION DESCRIPTION:
Pioneering Evolution is seeking an experienced Senior DevSecOps / .NET Security Engineer to design and implement secure, scalable, and auditable middleware and deployment workflows that power a modernized federal software system. This high-impact, on-site role blends hands-on engineering execution with DevSecOps best practices, ensuring security is deeply integrated throughout the software development lifecycle and aligned with mission-critical federal outcomes. The ideal candidate will thrive in Agile environments, demonstrate technical leadership, and collaborate cross-functionally to drive Zero Trust adoption and compliance with federal mandates. Other key responsibilities include:
-
Develop secure .NET Core middleware components including authentication, RBAC, input validation, and structured logging.
-
Integrate automated security scanning and vulnerability detection into CI/CD workflows.
-
Generate and manage Software Bills of Materials (SBOMs) to enhance software supply chain integrity.
-
Harden Docker containers and build artifacts using least-privilege and minimal-attack-surface principles.
-
Define and enforce security gates and compliance checks within CI/CD pipelines in collaboration with DevOps teams.
-
Implement secrets and credential management using tools such as AWS Secrets Manager or Azure Key Vault.
-
Define API security standards and ensure consistent, traceable deployment practices across services.
-
Align implementations with compliance frameworks such as FIAR and NDAA, including control mapping and audit evidence generation.
-
Enforce Zero Trust principles across infrastructure, services, and CI/CD workflows.
-
Work closely with AI/ML engineers to secure data routing and enable metadata traceability.
-
Participate in design and code reviews focused on security, audit readiness, and traceability.
-
Mentor engineering peers and promote best practices in secure software development and operations.
REQUIRED EXPERIENCE:
-
Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or related technical field.
-
Minimum of 6 years of backend development experience with C# and ASP.NET Core, including middleware and RESTful API design.
-
Strong understanding of authentication and authorization protocols (OAuth2, OpenID Connect, JWT).
-
Hands-on experience integrating static code analysis and vulnerability scanning tools into CI/CD workflows.
-
Experience generating and managing SBOMs and monitoring third-party dependencies.
-
Proficiency in Docker image development and container hardening techniques.
-
Experience with secrets management tools such as AWS Secrets Manager or Azure Key Vault.
-
Deep knowledge of secure coding standards, secrets handling, and structured logging practices.
-
Must be available to work full-time and on-site in the Washington D.C. metro area.
-
U.S. Citizenship and active Secret Clearance are required.
DESIRED EXPERIENCE:
-
Familiarity with secure reverse proxy frameworks (e.g., YARP) or API gateways.
-
Experience with policy-as-code frameworks (e.g., OPA, Gatekeeper) or infrastructure compliance tooling.
-
Exposure to observability and logging platforms like Sentry, OpenTelemetry, or similar tools supporting traceability.
-
Background aligning systems with compliance mandates such as FIAR, NDAA, or FedRAMP.
-
Understanding of Zero Trust architecture, service identity enforcement, and secure microservice communication.
WHO WE ARE AND WHAT WE OFFER:
In addition to competitive salaries and opportunities for professional development and advancement, our employees enjoy a comprehensive range of benefits. To keep pace with the changing needs of our employees, we continually evaluate benefit plans.
-
Paid time off
-
10 paid holidays
-
Medical insurance
-
Dental insurance
-
Vision insurance
-
Legal assistance
-
Company-paid life insurance and AD&D
-
Company-paid long term and short-term disability insurance
-
Tuition reimbursement
-
401(k) plan with company contribution
-
Continuing Education Opportunities
Apply for this job
*
indicates a required field