DevSecOps Engineer - Government

Responsibilities

• Own secure code integration across source, build, test, release, and deployment workflows.
• Build and maintain secure CI/CD pipelines, reusable templates, and hardened build environments.
• Integrate and consolidate SAST, DAST, SCA, secrets, container, and infrastructure-as-code scanning tools.
• Define security promotion gates, severity thresholds, exception workflows, and actionable remediation processes.
• Automate system hardening, security validation, policy enforcement, and machine-readable compliance evidence.
• Build preventive and detective controls across AWS GovCloud multi-account environments, including automated remediation.
• Implement software supply-chain protections such as SBOM generation, artifact signing, dependency management, and image admission control.
• Support software promotion into classified and air-gapped environments with offline dependencies, package mirrors, and controlled transfer workflows.
• Lead threat modeling and security design reviews and propose compensating controls.
• Map technical controls to NIST, DISA STIG, DoD, and CMMC requirements and support assessments and ATO activities.
• Provide secure development guidance, technical documentation, developer troubleshooting, and secure-practice coaching.
• Participate as a backup for build, artifact, and pipeline systems and join the security on-call rotation.

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field, or equivalent hands-on experience.
• At least 5 years of experience across software engineering, DevOps, platform engineering, or security engineering.
• DoD 8140/8570 IAT Level II qualification, including Security+ certification as a condition of employment.
• Hands-on scripting or software development experience with Python, Bash, Go, or similar languages.
• Experience with CI/CD platforms such as GitLab CI, GitHub Actions, or Jenkins.
• Production experience with Docker, Kubernetes, and infrastructure-as-code or configuration management tools such as Terraform, Ansible, AWS CDK, or CloudFormation.
• Hands-on AWS experience with Config, Security Hub, IAM, KMS, CloudTrail, and CloudWatch/EventBridge.
• Experience writing and deploying policy-as-code using OPA/Rego, cfn-guard, Cedar, or equivalent.
• Working knowledge of NIST 800-53, NIST 800-171, DISA STIGs, RMF, DFARS View phone number on us.fitly.work, and CMMC Level 2.
• Experience producing audit-ready evidence, working with third-party assessors, and introducing blocking security gates into delivery pipelines.
• Ability to integrate security tooling into developer workflows, troubleshoot findings, teach secure practices, and unblock delivery.
• Must be a U.S. citizen and have or be able to obtain an active DoD security clearance, with a minimum of Secret and Top Secret preferred.
• Willingness to travel for company business as required, approximately 10%.
• Preferred qualifications include CISSP, CSSLP, CKS, or AWS Security Specialty certification; experience with Platform One, Iron Bank, Big Bang, Kata Containers, gVisor, classified or air-gapped environments, SLSA, SSDF, CycloneDX, SPDX, OSCAL, FedRAMP, DoD Impact Level 4/5 authorization, or securing AI/ML workloads.

Benefits

• Full-time employees primarily work from an Applied Intuition office five days per week, with occasional remote-work flexibility; this expectation does not apply to contractors.
• Benefits may include health, dental, vision, life and disability insurance, a 401(k) with employer match, learning and wellness stipends, and paid time off.
• The role includes approximately 10% business travel as required by the company or customer.