DevSecOps Lead

POSITION TITLE:DevSecOps Lead LOCATION:Remote CLEARANCE:Must be able to obtain aHigh-RiskPublic Trust COMPANY OVERVIEW At APV,weremore than a technology company werea mission-driven powerhouse transforming organizations through advanced technology and human ingenuity.

Ourexpertisespans AI/ML, data architecture, low-code/no-code development, AgileDevSecOps, and cloud services, delivering scalable and meaningful solutions.

In our Emerging Technology Lab, innovation drives progress.

Our teams create intelligent chatbots, AI-powered assistants, robotic process automation (RPA), essay graders, and data analytics platforms.

Ifyourepassionate about solving complex challenges and shaping the future, APV is the place for you.

Since 2007,wevepartnered with federal and state agencies to deliver IT, training, and consulting solutions that achieve mission-critical outcomes.

Built on accountability, integrity, and quality, we go beyond expectations.With 70+ prime contracts and a proven record of client success, APV continues to grow andwerelooking for exceptional talent to grow with us.

At APV, we Always Provide Value POSITION SUMMARY Seeking a mission-driven DevSecOps Lead to support a large-scale federal healthcare technology program.

This role provides leadership across CI/CD, cloud engineering, automation, platform operations, infrastructure as code, and secure software delivery.

This role is accountable for release quality, environment reliability, and measurable reduction in deployment risk and cloud cost.

DUTIES Lead DevSecOps strategy and implementation across development, test, staging, and production environments.Design, maintain, and optimize CI/CD pipelines supporting secure software delivery.Implement Infrastructure as Code (IaC), automated deployments, configuration management, and environment provisioning.Integrate SAST, DAST, SCA, container security, and vulnerability scanning into delivery pipelines.Support Agile release management, deployment automation, release readiness, and production support.Collaborate with architects, security teams, and engineering teams to improve platform reliability and scalability.Support cloud optimization, observability, monitoring, logging, and operational automation initiatives.Build and maintain CI/CD pipelines on agency enterprise tooling such as GitHub and Jenkins, including automated build, test, security scanning, and deployment gates.Automate infrastructure and environment provisioning in AWS using infrastructure as code, and drive cloud cost optimization alongside reliability and scalability improvements.Embed SAST, DAST, SCA, container and image scanning, and secrets management into pipelines so that vulnerabilities are caught before release rather than after.Partner with the Security Manager on continuous monitoring, patching, and vulnerability remediation within agency-defined timelines, and support Authority to Operate (ATO) evidence collection.Improve observability, logging, and alerting to susta...