DevSecOps Engineer with Security Clearance

Overview We are seeking a DevSecOps Engineer to support a major Department of Defense mission focused on advanced defense capabilities and enterprise technology modernization. This role is responsible for designing, securing, automating, and operating cloud and on-premises infrastructure that enables reliable software delivery and mission-critical operations. The successful candidate will be a hands-on technical leader who can translate engineering and cybersecurity requirements into scalable platform solutions while partnering with software engineers, cybersecurity professionals, systems administrators, and program stakeholders. Responsibilities - Design, deploy, and maintain secure, scalable, and highly available infrastructure across cloud, hybrid, and on-premises environments.

• Develop and manage Infrastructure as Code (IaC) solutions using Terraform, Ansible, CloudFormation, Pulumi, or similar technologies.
• Build, maintain, and optimize CI/CD pipelines incorporating automated testing, security controls, artifact management, and deployment approvals.
• Integrate DevSecOps practices throughout the software development lifecycle, including code scanning, dependency scanning, secret detection, vulnerability management, and container security.
• Engineer and operate containerized environments using Kubernetes, OpenShift, Docker, and related technologies.
• Establish platform observability through centralized logging, monitoring, alerting, dashboards, tracing, and performance metrics.
• Implement identity and access management, secrets management, encryption, network segmentation, and least-privilege security controls.
• Support incident response, disaster recovery, continuity of operations, and root-cause analysis efforts.
• Automate operational processes to improve consistency, reduce risk, and increase system reliability.
• Develop and maintain technical documentation, architecture standards, runbooks, and operational procedures.
• Conduct infrastructure and deployment reviews to identify technical risks, security gaps, and performance concerns.
• Mentor engineers and promote best practices in automation, infrastructure reliability, and secure software delivery.
• Collaborate with engineering, cybersecurity, compliance, and program leadership teams to deliver scalable platform improvements. Required Qualifications
• 6+ years of professional experience, with experience requirements potentially reduced by advanced education.
• 4+ years of experience in DevOps, DevSecOps, Platform Engineering, Cloud Engineering, Site Reliability Engineering, Systems Engineering, or related technical disciplines.
• Experience leading technical teams, projects, or engineering initiatives.
• Experience designing and operating production infrastructure in AWS, Azure, Google Cloud Platform, private cloud, or hybrid environments.
• Strong experience with Infrastructure as Code and configuration management tools.
• Experience building and maintaining CI/CD pipelines using GitLab CI/CD, Jenkins, GitHub Actions, Azure DevOps, or similar platforms.
• Strong Linux administration skills and experience with scripting and automation using Python, Bash, PowerShell, Go, or similar languages.
• Experience with Kubernetes, OpenShift, Docker, and container orchestration technologies.
• Understanding of infrastructure security principles including vulnerability management, IAM, encryption, logging, secrets management, and secure configuration practices.
• Experience with monitoring and observability tools such as Prometheus, Grafana, Splunk, Elastic Stack, Datadog, or CloudWatch.
• Ability to troubleshoot complex infrastructure, networking, deployment, and security challenges.
• Current DoD 8570 IAT Level II certification (Security+, CySA+, or equivalent).
• Strong written and verbal communication skills.

Preferred Qualifications

• Bachelor's degree or higher in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field.
• Experience supporting DoD, federal government, intelligence community, or other regulated environments.
• AWS, Azure, Kubernetes, Red Hat, CISSP, CCSP, or similar industry certifications.
• Experience with policy-as-code and security-as-code tools such as OPA, Kyverno, Checkov, tfsec, Trivy, Snyk, or SonarQube.
• Familiarity with Zero Trust architectures and implementation strategies.
• Knowledge of software supply chain security practices, including SBOMs, artifact signing, provenance, and dependency management.
• Experience with high-availability architectures, disaster recovery planning, and performance engineering.

Familiarity with Agile development environments.