Junior DevSecOps Engineer (Python, CI/CD)

About Peregrine

We solve problems through people, process, and technology—in that order. Technology matters, but people make transformation happen. That principle defines our culture. Trust and motivation are the foundational pillars of delivery on which our skills stand. We hire people we can trust, who care deeply about what they do, take ownership, learn quickly, help one another, and refuse to walk past a problem because it belongs to someone else.

At Peregrine Advisors, you will share in operating the automation, continuous integration and continuous delivery (CI/CD) pipelines, and secure cloud infrastructure that keep federal systems running. But we hire people, not seats. As the work evolves, you will move to where the hardest problems are.

This is a hybrid work arrangement based in the Washington, DC metropolitan area, and the commuting cadence varies by assignment. The initial engagement requires United States citizenship and the ability to obtain a Public Trust determination.

Your first project

Expect your first project to put you shoulder to shoulder with engineers, on pipelines a team leans on every day. Depending on the assignment, you may:

• Contribute to the Terraform or CloudFormation code that defines infrastructure.
• Under senior engineers' guidance, develop and maintain deployment automation and pipelines.
• Pitch in on running Docker containers and Amazon Web Services (AWS) environments, from orchestration to monitoring and logging.
• Wire vulnerability checks, security scans, and policy controls into the delivery pipeline.
• Turn repeatable operational tasks into Python scripts, reaching for Bash or PowerShell when those suit better, and close out every finding that comes back.
• Take a hand in mapping and implementing National Institute of Standards and Technology Special Publication 800-53 (NIST SP 800-53) controls, and automate the evidence that shows compliance.
• Bring AI-assisted tools into your pipeline, testing, and scripting work, and verify every output they produce.

Code review sees every change you make, and you walk reviewers through the change and your reasons. That is where you learn what makes a change correct, not just that it runs. You automate the team's manual tasks, and you build your share of a practice that designs security in from the start instead of bolting it on later.

This is where you start, not the shape of your career here.

Requirements

• 1+ years of experience in software development, platform engineering, or operations engineering
• A bachelor's degree in computer science, information technology, cybersecurity, engineering, or a related technical discipline
• Practical use of one or more pipeline tools, grounded in a working knowledge of CI/CD concepts
• Ability to write scripts in Python (Bash or PowerShell skills a plus)
• Familiarity with Docker and containerization, together with the cloud services AWS offers
• Exposure to tools that express infrastructure as code, for example CloudFormation or Terraform
• A basic understanding of how containers are orchestrated
• Experience with the fundamentals of Linux
• Knowledge of web applications and application programming interfaces, together with networking concepts and load balancing
• Grounding in the principles of cloud security and in practices for delivering software securely
• Skill at tracking down and resolving problems in infrastructure and in deployments
• Experience generating and reviewing code with AI-assisted development tools such as GitHub Copilot
• Proficiency in writing, PowerPoint, and Excel

Preferred

• Prior work in information technology for the federal government
• Exposure to one or more of these areas: Authority to Operate (ATO) processes, NIST SP 800-53 controls, or Federal Information Security Modernization Act (FISMA) compliance
• An AWS certification or practical experience delivering production workloads on AWS
• A background with security tooling or vulnerability scanning, for example dynamic application security testing (DAST), policy-as-code, or static application security testing (SAST)

Who you are

For you, security and reliability belong in the build from the first commit, never in a final gate, and you are eager to grow into an engineer whose automation replaces other people's manual work and leaves an audit trail. When you hit a wall, you ask rather than guess. Feedback is your fastest way forward, and when priorities move, you move with them. You experiment, fail, learn, and repeat quickly. You would rather own an outcome than be handed a task.

What you bring

• A grounding in cloud fundamentals, networking, Linux, scripting, and delivery automation, and an appetite to dig deeper into security.
• Delivery habits in secure configuration, code review, automated testing, and version control, or a willingness to build them quickly.
• Clear, plain updates: what you have finished, where you are stuck, and what you need.
• The care to hold up where accuracy and auditability cannot slip.

You adapt your development workflow as AI tools evolve, using them to help implement, test, and improve the components you own. You give the tools clear context, review and test their output, and remain accountable for the code you deliver.

When we talk

Be prepared to discuss a difficult problem you worked through, the decisions you made, what happened, and what you learned. The technical assessment is a Python coding exercise.

Benefits

This is a full-time W-2 position with a salary of $80,000 to $95,000 per year.

Benefits include medical, dental, and vision insurance with the employee premium fully paid and half of dependent premiums; employer-paid life, accidental death, and short-term and long-term disability insurance; a 401(k) with an employer match of up to 4% of salary; unlimited paid time off; and sponsored professional certifications and continuing education.

What we offer

You will work alongside developers, engineers, data scientists, architects, and strategists, on work ranging from strategy to implementation. We support your development across assignments and clients through extensive onboarding, sponsored professional certifications such as the Data Management Capability Assessment Model (DCAM) and AWS technical certifications, and rotation across functions to expand your skills and perspective. The mission is real, the problems are hard, and you own what you ship.