Tri-Force Consulting Services, Inc. - Senior DevOps Engineer (777897)

DevOps Developer is needed in Mechanicsburg, United States.

Client: Tri-Force Consulting Services, Inc.

Location: Mechanicsburg, PA, us

Contract: Freelance

Job Description

Job title: Senior DevOps Engineer (777897)

Client: Public Safety Delivery Center

Location: 1920 Technology Parkway, Mechanicsburg, PA 17050

Work Location: Hybrid with two days onsite (1920 Technology Parkway, Mechanicsburg, PA 17050). Schedule can be discussed during interview.

This req is available to candidates nationwide, but candidates must be ready to relocate for this hybrid position (60% remote vs. 40% onsite). Candidates must go onsite on their first day to pick up commonwealth-issued equipment, badging, etc. PSDC (Public Safety Delivery Center) requires the services of a Senior DevSecOps Engineer to act as a consultant with the PSDC Solutions Management group.

Role summary: Hands-on security automation for AWS delivery. Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST. Azure support is a future consideration, not a core day-one duty.

Requirements

What you deliver in the first 90 days:

• Pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, container, and secret scanning gates.
• Compliance as code in reference accounts: AWS Config rules and Security Hub standards aligned to CJIS and NIST 800-53, with exceptions workflow documented.
• IaC reference modules using AWS CDK and CloudFormation for IAM least privilege, KMS, Secrets Manager, logging, and network baselines; Terraform equivalents provided where teams require them.
• Evidence exports tying checks to control IDs and producing auditor-ready artifacts.
• Ongoing Harden CDK/CFT modules and pipeline templates as compliance needs evolve.
• Coach pilot teams to adopt templates.
• Raise gaps to enterprise teams for org-level enforcement.

Day-to-day responsibilities:

• Author and maintain AWS CDK constructs and CloudFormation templates; provide Terraform versions as secondary.
• Implement AWS Config conformance, Security Hub standards, and GuardDuty routing in reference accounts.
• Wire scanning in CI/CD for app code, containers, and IaC.
• Create reusable GitHub/Azure DevOps templates with enforcement gates and exception handling.
• Generate posture and evidence reports mapped to CJIS and NIST controls.

Required skills:

• 5+ years AWS security automation and DevOps.
• Strong with AWS CDK and CloudFormation; working proficiency in Terraform.
• CI/CD authoring in GitHub Actions and Azure DevOps.
• Proficient in Python and Bash, with PowerShell for Windows automation.
• Able to read Java and C# to integrate and tune SAST/SCA.
• Practical knowledge of CJIS and NIST 800-53 control families and how to automate checks and evidence.
• EKS/ECS/Lambda hardening patterns.
• OPA/Conftest, Checkov, Trivy, Inspector, CodeQL or equivalent.
• Basic Azure security automation for future phases.

About Us

Since 2000, Tri-Force Consulting Services (https://triforce-inc.com) has been an MBE/SDB certified IT Consulting firm in the Philadelphia region. Tri-Force specializes in IT staffing, software development (web and mobile apps), systems integration, data analytics, system automation, cybersecurity, and cloud technology solutions for government and commercial clients. Tri-Force works with clients to overcome obstacles such as increasing productivity, increasing efficiencies through automation, and lowering costs. Our clients benefit from our three distinguishing core values: integrity, diligence, and technological excellence. Tri-Force is a six-time winner among the fastest-growing companies in Philadelphia and a four-time winner on the Inc. 5000 list of the nation’s fastest-growing companies.