DevSecOps Engineer - Senior at Peraton
Herndon, VA
$112,000–$179,000from the description
Jul 21, 2026
Herndon, VA
Jul 23, 2026
What this job asks for AI summary
A senior DevSecOps engineer role supporting FAA air traffic control modernization, focused on building and maintaining CI/CD pipelines with embedded security controls, automating infrastructure provisioning via IaC tools, and managing containerized deployments across cloud and hybrid environments. The position suits an experienced engineer comfortable with federal security frameworks, vulnerability management, and guiding development teams on secure-by-design practices. On-site work in Herndon, VA or Bowie, MD is required.
Senior level · 8+ years · Washington-Arlington-Alexandria, DC-VA-MD-WV · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 80 people in the Washington-Arlington-Alexandria, DC-VA-MD-WV area plausibly meet what this posting asks for (software developers). range 35–120
Applicant volume Light — Few people clear these requirements, so an application that does clear them gets looked at. Worth applying to even if you miss a nice-to-have.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $158,337 (middle half $126,441–$180,105). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The role is classified as Software Developers (15-1252) because its primary day-to-day work is building and shipping automation frameworks, CI/CD pipelines, and infrastructure-as-code — code-authoring work — rather than security analysis. Information Security Analysts (15-1212) is a genuine runner-up given the heavy DevSecOps and compliance emphasis.
Clearance: the JD requires the ability to obtain a Public Trust determination, which is a federal suitability adjudication, not a DoD security clearance (Confidential/Secret/TS). Clearance_required is set to None accordingly.
Degree requirement: the JD accepts a HS diploma/equivalent with 12 years of experience, an Associate's with 10, a Bachelor's with 8, or a Master's with 6 — equivalent experience is explicitly accepted at every level, so no minimum formal degree is hard-gated.
Total years minimum is set to 8, reflecting the Bachelor's-degree pathway (the most common baseline); the JD's other pathways require more years to compensate for a lower degree.
Jenkins is listed first among the CI/CD tool examples ('Jenkins, GitLab CI/CD, Azure DevOps, or CircleCI'); all four are captured as a single interchangeable requirement with Jenkins as the primary name.
Splunk, ELK Stack, Prometheus, and Grafana are listed together as logging/monitoring platform examples under Basic Qualifications; they are captured as a single interchangeable requirement with Splunk as the primary name.
AWS, Azure, and GCP appear in both the responsibilities narrative and the Preferred Qualifications section. They are marked required because cloud environment support is explicitly called out in the Basic Qualifications responsibilities block ('cloud and hybrid environments (AWS, Azure, GCP)').
Docker, Kubernetes, and OpenShift appear in the responsibilities section as containerization/orchestration solutions the role must implement; they are marked required on that basis.
Certifications (CISSP, CCSP, AWS Certified DevOps Engineer, CKS, CKA, Security+, Microsoft DevOps Solutions Expert) are listed under Preferred Qualifications and are marked accordingly.
The work location is on-site in Herndon, VA (primary) or Bowie, MD (alternate); both fall within the Washington-Arlington-Alexandria CBSA. Remote work is not offered.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.