Senior Cloud Security / DevSecOps Engineer

Location: Washington, DC AreaWork Arrangement: Hybrid – 2 days onsite / 3 days remote, with the ability to transition to 5 days onsite if required by the clientJob Type: Full-TimeAbout EastBay SystemsEastBay Systems is a cybersecurity and IT consulting firm supporting Federal civilian agencies.

Our services include Cloud Security, DevSecOps, Security Engineering, SOC Operations, GRC, and Continuous Monitoring.About the RoleWe are seeking a Senior Cloud / DevSecOps Engineer to join an established cybersecurity engineering team supporting a Federal hybrid-cloud environment.This is a hands-on role focused on secure cloud environments, CI/CD security, application security, automation, and secure software delivery. You will work closely with development, cloud, security engineering, SOC, and GRC teams to improve security throughout the development and deployment lifecycle.We are looking for someone who can contribute quickly, solve complex technical problems, and work independently without being expected to own every aspect of the security environment.What You’ll DoIntegrate security into CI/CD pipelines and software development processes.Support SAST, DAST, SCA, secrets scanning, container scanning, and Infrastructure-as-Code security testing.Work with developers to identify and remediate application, API, dependency, and cloud-security issues.Support secure application deployments across Azure and AWS.Assist with cloud security configuration, identity, access controls, logging, monitoring, and vulnerability remediation.Support Microsoft Entra ID, Conditional Access, RBAC, PIM, and least-privilege access.Develop security automation using PowerShell, Python, Azure Logic Apps, REST APIs, JSON, or similar technologies.Integrate application and cloud telemetry with Microsoft Sentinel and enterprise monitoring platforms.Participate in cloud and application security architecture reviews.Support Federal cybersecurity requirements, including FISMA, NIST RMF, NIST SP 800-53, FedRAMP, and Continuous Monitoring.What We’re Looking For7+ years of experience in DevSecOps, cloud engineering, cybersecurity engineering, software engineering, or a related technical role.Hands-on experience with Azure and/or AWS.Experience securing CI/CD pipelines and software development processes.Experience with application-security tools such as SAST, DAST, SCA, secrets scanning, container scanning, or IaC scanning.Experience with Azure DevOps, GitHub, GitLab, Jenkins, or similar CI/CD platforms.Experience with PowerShell, Python, REST APIs, or similar scripting and automation technologies.Working knowledge of cloud networking, identity, logging, and security controls.Experience with Microsoft Sentinel or a comparable SIEM platform.Strong troubleshooting and problem-solving skills.Ability to work independently while collaborating effectively across technical teams.Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related technical field.Ability and willingness to work onsite 2 days per week and transition to 5 days onsite if required by the client.Nice to HaveTerraform or other Infrastructure-as-Code experience.Docker, Kubernetes, OpenShift, or other container-platform experience.Microsoft Defender for Cloud or Defender XDR experience.Federal cybersecurity experience supporting FISMA, RMF, FedRAMP, or NIST requirements.CISSP, CCSP, AZ-500, AWS Security Specialty, or similar certifications.BenefitsEastBay Systems offers a competitive benefits package for eligible full-time employees, including:Medical, dental, and vision insuranceThree weeks of paid time offPaid Federal holidays401(k) retirement plan with employer contributionAdditional employer-sponsored benefits in accordance with company policyEqual Employment OpportunityEastBay Systems is an Equal Opportunity Employer. Employment decisions are based on qualifications, merit, business needs, and job-related requirements.We do not discriminate on the basis of race, color, ethnicity, national origin, religion, sex, pregnancy, sexual orientation, gender identity or expression, age, disability, genetic information, protected veteran status, marital status, or any other characteristic protected by applicable Federal, state, or local law.