DevSecOps Engineer with Security Clearance

Job Title: DevSecOps Engineer (Classified IT Transformation)
Location: Secure Facility, Orlando, FL (on site)
Schedule: 4 × 10 hrs (Mon Thu) with 24 × 7 on call rotation; occasional off shift hours, weekends, and limited travel.

Security Clearance: Top Secret (required prior to start) – Must obtain DoD 8570 IAT Level II/III (Security+, CASP, CISSP) ________________________________________
Your Mission
As a DevSecOps engineer, you will help transform our manual systems workflows into repeatable, automated processes following modern DevSecOps best practices.

You will design, implement, secure, and automate the end to end IT infrastructure that supports classified and unclassified environments across cloud, virtualized, and on premise platforms.
________________________________________
Core Responsibilities
Domain Key Activities
Systems Engineering & Administration • Install, configure, and maintain Windows Server, Linux (Red Hat), VMware Horizon, ESXi, hyper converged infrastructure (HCI), VDI, SAN/NAS, and storage area appliances.

• Manage Active Directory, DNS, LDAP, and related domain services.
• Perform routine updates, major upgrades, patch management (STIG compliant) and vulnerability remediation.

Virtualization • Manage virtualization platforms (VMware, KVM, Hyper V) and container orchestration (Kubernetes, OpenShift, Docker, Rancher, TKG).
DevSecOps & Automation • Build and maintain Infrastructure as Code with Terraform and Ansible/Ansible Tower.

• Develop CI/CD pipelines using GitLab, Git, Nexus, and related tooling.
• Automate configuration management, testing, and deployment of secure, repeatable environments.

Security & Compliance • Apply DoD Risk Management Framework, STIG/DSS hardening, and continuous monitoring (Splunk, McAfee ePO).

• Conduct security technical implementation guide (STIG) compliance audits and remediation.

Scripting & Tool Development • Write and maintain scripts in Python, PowerShell, Bash, and other languages to support administration, automation, and troubleshooting.
Troubleshooting & Support • Lead incident response for server, network, storage, and cloud issues; provide timely, innovative resolutions.
Collaboration & Agile Practices • Participate in Scrum ceremonies (stand ups, sprint planning, retrospectives).

• Partner with architects, product owners, and other engineers to translate requirements into secure, automated solutions.

Documentation & Asset Management • Maintain accurate server and cloud asset inventories, configuration baselines, and compliance documentation.
All work is performed on site in a classified environment; occasional off shift hours, weekend support, and limited travel are expected.
________________________________________

Basic Qualifications
1. Top Secret clearance (must be active at start).
2. Ability to obtain DoD 8570 IAT Level II/III certification(i.e. Security+, CASP, CISSP) within 90 days.
3. 5+ years of hands on experience with system administration on Windows and Linux platforms.
4. Strong expertise in Active Directory, DNS, LDAP, and patch management for both OS families.
5. Proven troubleshooting skills for complex, multi layered infrastructure problems.
________________________________________

Desired Skills & Experience
Category Desired Expertise
Security & Compliance STIG/DSS hardening, Risk Management Framework, security monitoring (Splunk, McAfee ePO). Virtualization & Storage VMware, Hyper V/KVM, HCI, VDI, SAN/NAS, storage networking. Infrastructure as Code & Automation Terraform, Ansible/Ansible Tower, CI/CD pipelines (GitLab, Nexus), Git. Containerization Docker, Kubernetes, OpenShift, Rancher, TKG. Scripting & Programming Python, Bash, PowerShell, Javascript, TypeScript
Monitoring & Management Tools Splunk, vSphere, other environment management solutions.

Database & Collaboration Services SQL/NoSQL basics, Exchange, SharePoint, Teams/Skype for Business. Networking Fundamentals Basic routing/switching concepts, VLANs, firewall rules. Agile/DevSecOps Practices Scrum participation, user story estimation, sprint planning, continuous improvement. Communication Clear written and verbal communication across technical and non technical audiences.
________________________________________