Senior DevSecOps Engineer with Security Clearance

Labor Category: DevSecOps Engineer Clearance: U.S. Citizen with active SECRET clearance (required).

Position Summary
Design, automate, and secure the CI/CD pipelines, cloud infrastructure, and RMF compliance for a FedRAMP High / DoD Impact Level 5 (IL5) data and analytics platform. Embeds security automation across the DevOps lifecycle under an 'Automation-First' mandate. A.

Minimum Qualifications ● Five (5) years in DevSecOps: designing, implementing, and maintaining CI/CD pipelines and automating deployment (Jenkins, GitLab CI/CD, Ansible).
● Five (5) years supporting the RMF process for DoD/federal systems: applying DISA STIGs, vulnerability assessments, and patching/remediation.
● Five (5) years automating cloud infrastructure/platform provisioning (AWS, Azure) using Infrastructure as Code (Terraform, CloudFormation).
● Experience integrating security automation, vulnerability scanning (Nessus, OpenSCAP), and monitoring/logging (Splunk, ELK) into the DevOps lifecycle.
● Verifiable experience with containerization/orchestration (Docker, Kubernetes) in a microservices architecture.
● Verifiable experience integrating automated security testing (SAST and DAST) directly into the CI/CD pipeline.

B.

On-Contract Responsibilities ● Automate infrastructure and workflows using IaC (Terraform, Ansible); build and manage CI/CD pipelines for secure deployment; develop streaming data pipelines (Apache Kafka, AWS Kinesis) for real-time processing. ● Deliver all activities and evidence to achieve and maintain a full Authority to Operate (ATO) under RMF — System Security Plan, Security Assessment Report, POA&M — and support control assessments and continuous monitoring. ● Implement Compliance-as-Code: automate DISA STIG application/verification across all infrastructure layers; auto-generate RMF artifacts (PPSM, topology diagrams) from IaC repos so eMASS reflects the true environment; integrate zero-touch automated vulnerability scanning into CI/CD. ● Operate within a FedRAMP High / DoD IL5 cloud (AWS GovCloud, Azure Government), ensuring all AI/ML processing stays inside the accredited boundary (no CUI to public commercial AI endpoints). ● Use IaC to dynamically provision/de-provision GPU-accelerated compute clusters to control costs, supporting the MLOps lifecycle. ● Perform continuous security compliance for baseline components — software patching and STIG/vulnerability remediation — with zero degradation to legacy capabilities during modernization.