DevSecOps Engineer

DevSecOps Engineer

We are seeking a DevSecOps Engineer to join our team in supporting critical U.S. Army mission applications. In this role, you will bridge the gap between software development, military-grade security compliance, and cloud operations. You will be responsible for automating our deployment pipelines, hardening containerized workloads, managing secure infrastructure, and accelerating our path to a Continuous Authority to Operate (cATO) across multi-enclave environments.

Required Qualifications

• Must possess an active TS security clearance.
• Must meet DoD 8570.01-M IAT Level II baseline certification requirements (e.g., CompTIA Security+ CE, CCNA Security, or equivalent) prior to start.

Cloud & Infrastructure

• Experience provisioning and administering Azure/Azure Government cloud environments (AKS/Containers, Azure DevOps, ACR, Blob Storage).
• Experience deploying and managing workloads on Red Hat OpenShift using GitOps methodologies (e.g., ArgoCD, GitLab runners) with strict Dev/Stage/Prod separation.
• Experience deploying, scaling, and automating backups for database platforms, specifically MongoDB (replica sets) and PostgreSQL/pgAdmin within containerized environments.

DevSecOps & Automation

• Working knowledge of application containerization, container hardening, Dockerfile creation and management, and automated container building and deployment processes.
• Hands-on experience building, securing, and maintaining robust CI/CD pipelines utilizing GitLab CI and/or Azure DevOps.
• Experience integrating automated security gates (SAST/DAST, Software Bill of Materials [SBOM]) and container scanning tools (e.g., Semgrep, Fortify, Grype, SonarQube) directly into deployment pipelines.
• Scripting proficiency in Python and PowerShell for infrastructure automation, system monitoring, data migration, and backup automation.

Security & Compliance

• Experience automating and supporting Risk Management Framework (RMF) and Authority to Operate (ATO) processes, including generating artifacts for XACTA and/or eMASS, Privacy Impact Assessments, and Test Plan Management/Self-Assessments.
• Strong familiarity with DoD/IC Impact Level environments (IL4/IL5/IL6, IL7), STIG compliance, and associated security constraints.
• Experience integrating identity and access management (IAM) solutions such as Keycloak (OAuth, OIDC, SSO integration).
• Experience managing PKI and certificate lifecycles, including requesting, deploying, and rotating non-person entity (NPE) certificates.

General & Professional Skills

• Experience working within a complex government/IC customer environment (e.g., Army, NGA), including coordinating technical requirements across multiple stakeholder teams.
• Strong written communication skills with the ability to generate clear technical documentation, standard operating procedures (SOPs), and status reports.

Preferred Qualifications

• Hands-on experience operating within air-gapped, high-side, or JWICS network environments.
• Experience with Cross-Domain Solutions (CDS) or secure data transfer protocols between enclaves of varying classifications.
• Experience implementing centralized Secrets Management solutions (e.g., GitLab Secrets, Azure Key Vault).
• Full-stack application development experience or experience supporting developers with admin dashboards, API gateways, and data visualization/mapping tools (e.g., Leaflet).
• Experience with database schema design, standardization, and migration patterns across multiple database platforms (Postgres, SQL, Mongo).
• Strong verbal communication skills with a proven ability to brief complex technical capabilities to non-technical leadership or mixed audiences.

Benefits

• Competitive compensation package and benefits.
• Professional development and certification opportunities.
• Collaborative and supportive team environment.