TechSur is seeking a DevSecOps Engineer to build the automated pipelines behind a federal customer's multi-cloud platform. This is a part-time (0.5 FTE, about 20 hours per week) role. You will develop CI/CD pipelines that provision infrastructure and deploy applications consistently across AWS, Azure, Google Cloud, and Oracle Cloud, with security testing built into every stage. Working closely with cloud engineers, security specialists, and customer development and operations teams, you will make Infrastructure-as-Code the standard way environments are built and changed. You will also help the team ship faster without giving up control or compliance. Key Responsibilities Design, build, and maintain multi-stage CI/CD pipelines (build, test, scan, deploy) for infrastructure and customer applications. Integrate security testing into pipelines: SAST (SonarQube, Checkmarx), software composition analysis (Snyk, Black Duck), DAST (OWASP ZAP), and container scanning (Trivy, Aqua), with gates that fail builds on high-severity findings. Develop reusable Infrastructure-as-Code modules (Terraform, Bicep, CloudFormation) and Ansible playbooks for configuration management. Implement GitOps practices (e.g., Argo CD) and policy-as-code checks (OPA/Rego, Checkov) to prevent configuration and IaC drift. Set up blue-green and canary deployment strategies with automated health checks and rollback. Use CSP-native DevOps services (AWS CodePipeline/CodeDeploy, Azure DevOps, GCP Cloud Build/Cloud Deploy, OCI DevOps) alongside third-party tools. Integrate pipelines with ServiceNow to automate change requests and risk-based approvals. Document pipeline patterns and coach development and operations teams on DevSecOps practices.