DevSecOps Engineer

Peregrine Advisors is a firm founded on a simple conviction: the best solutions come from the people closest to the problem, given real ownership and the tools to deliver. We are a data and technology innovation hub and a Benefit Corporation working at the center of the federal government's mission to deliver for client stakeholders and the US public, looking for highly motivated contributors who thrive when trusted to own a hard problem and equipped to deliver the solution.

Your first assignment

Your first assignment will likely include helping build and operate the secure delivery pipelines that carry a federal platform's services into production by:

• building and maintaining continuous integration and continuous delivery (CI/CD) pipelines that take services from commit to deployment the same way every time;
• writing infrastructure-as-code on Amazon Web Services (AWS) so environments are created from templates, not by hand;
• containerizing services and keeping images patched, scanned, and small;
• wiring up the monitoring, logging, and vulnerability scanning that make systems observable and provably secure; or
• helping assemble the security evidence that carries a system through its Authority to Operate (ATO).

Adaptability and an appetite for learning new concepts, systems, and tools are what will move you forward fastest here.

The work is real, hard, and it matters. It is also where you start, not the shape of your career here: we hire people, not seats, and we move our best to where the hardest problems are.

What you'll build

• Pipelines a team relies on every day: builds, tests, and deployments that are routine rather than events.
• The security fabric around them, learned by doing: scanning, monitoring and logging, and controls mapped to National Institute of Standards and Technology (NIST) Special Publication 800-53.
• Working automation reviewed by people who explain what to change and why, and the findings you chase down along the way: the fastest ways to get good at this.
• Your part of the shift-left practice that builds security in rather than bolting it on, growing as you show you can carry more.
• AI-assisted engineering as standard practice: learning tools like Amazon Q Developer across the lifecycle.
• In time, the firm itself: new capabilities, tools, and lines of business you help spin up.

Who you are

You treat security and reliability as part of the build, not a gate at the end, and you are highly motivated to develop as an engineer who automates what others do by hand and leaves an audit trail behind. You ask when you are stuck rather than guessing, you take feedback as the fastest route forward, and when priorities shift, you shift with them. You communicate clearly, adapt across roles and clients, and care about creating public value. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• A foundation in scripting, cloud fundamentals, and delivery automation, and a real appetite to go deeper on the security side.
• The delivery habits, or the willingness to build them fast: version control, automated testing, code review, and secure configuration.
• The communication to say clearly what you have done, what you are stuck on, and what you need.
• The precision to work where accuracy and auditability are not optional.

What you'll need

U.S. citizenship (this initial engagement may be staffed by U.S. citizens only) and the ability to obtain a Public Trust determination. This is a hybrid role based in the Washington, DC metropolitan area, and it requires commuting into DC regularly. Everything else, the years, the certifications, the specific tools, we ask in the application and get into during the interview.

What we offer

A high-performing team of developers, engineers, data scientists, architects, and strategists solving complex, real-world problems, with work that runs from strategy formulation to hands-on implementation. We develop people across roles and clients, with extensive onboarding and sponsored training and professional development. And Peregrine has been a Benefit Corporation from day one: public value is built into the work itself, not bolted on afterward. Work worth your best years.

What we commit to

As a Benefit Corporation, our commitment runs three ways: real, measurable value for our clients; government that works better for the public; and a team that makes everyone in it better.

We hire people who want to help build the firm, not just work at it. If that is you, apply.

Peregrine Advisors is an equal opportunity employer.

Peregrine exclusively works with OPEN Data Jobs to recruit our team. Register with OPEN Data Jobs to be considered for this opening and future roles. 

• 3+ years of software development, platform, or operations engineering experience
• Bachelor’s Degree in Computer Science or related field
• Scripting ability (Python, Bash, or PowerShell)
• Working knowledge of continuous integration and continuous delivery (CI/CD) concepts, with hands-on experience in at least one pipeline tool
• Familiarity with cloud services on Amazon Web Services (AWS) and with containerization
• Familiarity with infrastructure-as-code (CloudFormation or Terraform)
• Basic proficiency in writing, PowerPoint, and Excel

Preferred

• Exposure to federal security controls (Federal Information Security Modernization Act (FISMA), NIST 800-53) or Authority to Operate (ATO) processes
• Vulnerability scanning or security tooling experience
• Amazon Web Services exposure or certification
• Federal information technology experience
• Familiarity with AI-assisted developer tooling

Medical, dental, and vision with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) matched 100% up to 4% of salary, vesting immediately; unlimited paid time off; and sponsored professional certifications and continuing education.