DevSecOps Engineer

Key Responsibilities

• Architecting, deploying, and maintaining robust, scalable CI/CD pipelines using GitLab CI/CD, Jenkins, and native GitOps tooling across unclassified and classified environments.
• Leading the implementation of automated security controls throughout the software development lifecycle (SDLC), integrating Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), software supply chain security, and container vulnerability scanning (e.g., SonarQube, Trivy, Anchore, Prisma Cloud).
• Designing, automating, and managing secure cloud and on-premises infrastructure configurations using tools such as Terraform, Ansible, and Packer.
• Building, hardening, and managing containerized workloads running on enterprise Kubernetes distributions (e.g., DoD Iron Bank / Platform One, Rancher, OpenShift) in compliance with DISA STIGs and NIST SP 800-53 controls.
• Partnering directly with software developers, systems engineers, and government stakeholders to eliminate delivery bottlenecks, troubleshoot complex deployment issues, and accelerate ATO (Authority to Operate) pathways.
• Providing guidance, code reviews, and architectural recommendations to junior and mid-level engineering personnel while actively establishing DevSecOps best practices across the directorate.

Required Qualifications

• Active DoD 8140 certification (e.g., Security+)
• Bachelor's degree in Computer Science, Software Engineering, Data Science, or a related STEM discipline (equivalent relevant experience may be considered in lieu of degree).
• 5+ years of professional software development, systems engineering, or DevOps/DevSecOps experience.
• 2+ years supporting engineering activities within the DoD, Federal Government (military/civil servant), FFRDC, or defense contracting ecosystem.
• Proven experience building and managing CI/CD pipelines (GitLab CI, Jenkins, ArgoCD).
• Hands-on experience integrating static and dynamic code/container scanning tools into automated delivery pipelines.
• Deep working knowledge of Linux system administration, bash scripting, Git workflows, and containerization engines (Docker, Podman).
• Proficiency in one or more core languages (e.g., Python, Go, Java, C++, or modern JavaScript/TypeScript).
• Solid background working in Agile/Scrum delivery environments, participating in sprint planning, backlog grooming, and technical demos.
• Active Top Secret / SCI (TS/SCI) clearance and U.S. Citizenship.

Desired Qualifications

• Direct familiarity with DoD software factory initiatives, such as Platform One, Iron Bank, or Big Bang.
• Practical experience architecting and deploying workloads in AWS GovCloud, Azure Government, or hybrid cloud environments.
• Hands-on experience deploying and operating production Kubernetes clusters.
• Familiarity with NIST RMF (Risk Management Framework), DISA STIG implementation, and automated compliance auditing.
• Relevant industry certifications such as AWS/Azure Certified Solutions Architect, Certified Kubernetes Administrator (CKA), CISSP, or CompTIA Security+.

Pay and benefits

The estimated salary range for this position is $90,000.00 - $150,000.00, commensurate on experience and technical skillset.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.