Senior DevSecOps Engineer III with Security Clearance

About the role Gateway Geospatial Group (G3) is seeking a Senior DevSecOps Engineer III to design, implement, and maintain secure, efficient software development and deployment pipelines across multiple classification environments. You'll collaborate with cross-functional development, operations, and security teams to integrate DevSecOps best practices throughout the software lifecycle, delivering high-quality, secure, and reliable mission solutions. Responsibilities

• Collaborate with customers and internal teams to design and implement automated technical solutions across multiple classification environments, working independently or as part of a team to address complex technical requirements
• Develop CI/CD pipelines from scratch in GitLab CI and Jenkins with integrated security scanning and STIG compliance validation, providing expert guidance to development teams on pipeline troubleshooting and DevSecOps best practices
• Create and maintain Infrastructure as Code (IaC) templates primarily using CloudFormation to architect highly available, resilient, and secure DevSecOps tool infrastructure across AWS environments (GovCloud, C2S, TC2S) while ensuring STIG compliance and guiding junior engineers on IaC best practices
• Lead advanced troubleshooting efforts by analyzing system and application logs using Linux command-line tools, conducting root cause analysis for complex issues, and developing mitigation strategies for service degradation
• Provide expert security guidance to development teams on secure coding practices, STIG compliance, vulnerability remediation, and other best practices in support of ATO efforts
• Architect and build secure containerized solutions by designing Docker images with security best practices, implementing and optimizing OpenShift deployments and configurations, remediating Prisma security findings, and guiding development teams on container orchestration
• Perform code reviews and knowledge sharing while maintaining technical documentation, promoting best practices, and fostering continuous team improvement Required qualifications
• Active TS/SCI with CI Poly security clearance
• Certification to satisfy IAT Level 2 (e.g., Security+, GSEC, SSCP, or similar)
• 10+ years of experience as a DevSecOps Engineer or similar role, with a strong focus on infrastructure automation, scalability, and reliability across the software development lifecycle, delivering DevSecOps services across multiple classified domains (e.g., IL5, IL6+)
• Expert experience with DevOps practices, CI/CD pipelines, containerization, and other automation tools (e.g., Jenkins, GitLab CI/CD, Artifactory, SonarQube, and/or Prisma Cloud)
• Strong experience with scripting languages (e.g., Python, Bash) in a Linux environment (e.g., RHEL, Oracle Linux, or similar)
• Strong experience with infrastructure as code (IaC) tools (e.g., Terraform and/or CloudFormation, Ansible)
• Experience with Tier 1-3 customer support and ticketing systems (e.g., GitLab Service Desk or ServiceNow)
• Expert understanding of AWS capabilities (e.g., EC2, S3, IAM, RDS, etc.) and architecting secure cloud-based infrastructure and services
• Hands-on experience configuring applications and systems to comply with Secure Technical Implementation Guides (STIG) and Security Requirements Guide (SRG)
• Knowledge of security best practices, common vulnerabilities, and security frameworks (e.g., OWASP, NIST, OpenSCAP)
• Ability to work independently and communicate with stakeholders across a cross-functional, enterprise environment to drive project completion