Senior DevSecOps Engineer

Description

The role supports a DoD/AF customer with a DevSecOps team that builds, secures, and runs cloud-native enterprise platforms.

The work centers on Kubernetes platform engineering, Big Bang deployment and sustainment, Terraform-managed infrastructure, GitOps, and secure CI/CD automation in mission-critical environments.

This is a full-time, regular position with up to 10% local travel.

Responsibilities

• Deploy, configure, and maintain Kubernetes platforms and mission applications with Big Bang, Helm, and GitOps methods.
• Write and upkeep Terraform modules that provision cloud infrastructure, Kubernetes resources, networking, IAM, and platform services.
• Design, harden, and tune CI/CD pipelines for apps and infrastructure, including reusable templates, automated tests, and controlled release promotion.
• Find, rank, fix, and verify infrastructure, container, and application security issues within the vulnerability-management SLAs.
• Build and keep up hardened Kubernetes and cloud configuration baselines that align with DISA STIGs, NIST 800-53, RMF, and internal security rules.
• Run Kubernetes security controls such as RBAC, network policies, pod security standards, admission controls, secrets handling, and secure ingress and egress.
• Keep Git as the single source of truth for infrastructure and platform config, and make sure live environments match approved code.
• Watch CI/CD platforms, runners, deployments, and Kubernetes workloads, and troubleshoot build, deployment, performance, and uptime problems.
• Create automated patching, configuration management, and compliance checks that cut manual work and configuration drift.
• Write security and operations documentation, such as architecture diagrams, procedures, scan evidence, remediation plans, and POA&M updates.
• Support RMF and ATO activities by gathering control evidence, resolving assessment findings, and maintaining continuous-monitoring records.

Requirements

• Required:
• Hold an active Secret clearance.
• Have at least 7 years of relevant professional experience and a related degree.
• Have strong experience building and maintaining Terraform modules and reusable IaC patterns for cloud, network, and Kubernetes resources.
• Have implemented GitOps workflows with tools like Argo CD, Flux, GitLab, GitHub, or similar.
• Have 3 to 5 years designing and deploying Kubernetes solutions. Big Bang experience is a plus.
• Have experience with CI/CD pipelines, containers, and secure DevSecOps practices.
• Have worked with AWS services including EKS, IAM, VPC, EC2, S3, Route 53, CloudWatch, load balancers, and security services.
• Be well versed in DISA STIGs, RMF, NIST SP 800-53, ATO processes, POA&M management, continuous monitoring, and compliance evidence.
• Desired:
• Have 5 to 10 years in DevSecOps, platform, cloud engineering, SRE, or software delivery roles.
• Have experience with CAC authentication, PIV tokens, and client-side PKI certificate handling.
• Be skilled in Python, Bash, PowerShell, Go, or similar languages for automation and operations.
• Hold relevant certifications such as CKA, CKAD, CKS, HashiCorp Terraform Associate, AWS certifications, Security+, CISSP, or CCSP.
• Have experience with ATO or accreditation processes.
• Be familiar with scanning and compliance tools such as RMF, ACAS, Twistlock, or Prisma Cloud.
• Have shown you can work across multi-tenant identity services supporting thousands of users and integrating with microservices.

Conditions

Full-time, regular position with up to 10% local travel.

Secret clearance is required as a minimum to start.

The posted salary range is $98,500-$206,800. Final pay depends on location, Federal contract labor categories and wage rates, prior experience, skills, education, and certifications.

Because the role can be based in more than one location, the range shown is the national average.

The company supports flexible working so employees can balance quality work with their personal lives.

Benefits

• Competitive compensation, benefits, and learning and development opportunities.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
• A flexible time off benefit that lets you take the time you need.
• Access to robust learning resources for career development.