DevSecOps Engineer

DevSecOps Engineer

EverforthECS is seeking a DevSecOps Engineer to work in a hybrid remote/onsite capacity, with minimum of 3 business days onsite at our Fairfax, VA corporate office and/or our Ashburn, VA customer site. This role will architect, operate, and optimize DevSecOps pipelines that deliver Everforth ECS products across NIPRNet pipelines, ensuring mission alignment and operational resilience.

Job Responsibilities:

• Architects, operates, and optimizes advanced DevSecOps pipelines supporting integration enterprise delivery across NIPRNet for Department of Homeland Security missions, and Senior Executive Service leadership.
• Designs core pipeline architectures, cross-domain artifact flow patterns, and security tool integrations using GitLab, Jenkins, SonarQube, Nexus, Harbor, Kubernetes, Terraform, and container orchestration platforms.
• Leads continuous development of pipeline architecture, authors detailed process documentation, and coordinates extensively with software engineering, cybersecurity, and platform infrastructure teams to maintain mission alignment and operational resilience.
• Acts as the primary escalation point for complex pipeline failures, zero-day vulnerability triage, and classification boundary issues affecting multi-network delivery.
• Maintains expert-level mastery of continuous integration tooling, static and dynamic security scanning platforms, software composition analysis systems, and compliance automation capabilities used across the CBP Outrider integration ecosystem.
• Authors technical standards including pipeline YAML and domain-specific DSL, policy-as-code modules, artifact signing procedures, and automated authorization workflows governing software factory operations.
• Pilots advanced security-as-code techniques such as policy-driven guardrails, automated risk scoring, and cross-domain validation prototypes within controlled lab environments prior to production adoption.
• Integrates scanning, software bill of materials generation, compliance validation, and automated security gates using Anchore, Trivy, OpenSCAP, and Sysdig to maintain vulnerability reduction and configuration discipline.
• Monitors pipeline performance indicators—including success rates, deployment frequency, restoration times, defect recurrence, and integration stability—to identify reliability risks and accelerate delivery velocity.
• Produces technical assessments, architecture updates, optimization recommendations, and leadership reports that strengthen automation coverage, operational readiness, and mission execution across the CBP Outrider integration enterprise.
• Performs other duties as assigned.

Salary Range: $125,000-150,000

General Description of Benefits

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or Information Technology.
• US Citizen; Must be able to obtain and maintain a Public Trust determination.
• IATIII‑level security certifications (CompTIACASP+CE, ISC²CISSP or Associate, GIACGCED, GIACGCIH, or CiscoCCNPSecurity).
• Minimum 5years of experience designing, implementing, and maintaining enterprise‑scale DevSecOps pipelines across multi‑domain and classified environments.
• Proven expertise in integrating CI/CD tools such as GitLab, Jenkins, SonarQube, Nexus, Harbor, Kubernetes, and Terraform with security‑as‑code frameworks.
• Demonstrated ability to lead cross‑functional teams, author process documentation, and provide escalation for complex pipeline failures and vulnerability triage.
• Strong problem‑solving and decision‑making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end‑users to executive management).