Senior DevSecOps Engineer - Active Top Secret required

Description

The company is a global technology and professional services firm with 26,000 experts across more than 50 countries. It serves US government, defense and intelligence agencies with work in AI, cloud, cyber and software development.

This role sits in IT infrastructure and operations. You will join a collaborative, high-performing team that builds security into development and operations from the start.

Responsibilities

• Build and maintain automated CI/CD pipelines that are secure by design.
• Set and enforce security practices for secure configuration, dependency management and deployment.
• Bring security checks into every stage of the SDLC: build, test, deploy and runtime.
• Design, deploy, run and maintain enterprise development security platforms, secure or vetted package management tools and SecOps CI/CD solutions.
• Work with development, security and operations staff to put security controls into pipelines, tools and workflows.
• Mentor development teams on secure coding, threat modeling and vulnerability remediation, giving advanced technical guidance.
• Find security risks, recommend fixes and drive adoption of shared security standards and patterns.
• Lead and take part in security reviews of designs, code and pipelines.

Requirements

• 5+ years of related experience.
• A bachelor's degree in a technology field such as computer science, information technology or engineering, plus at least 5 years of relevant experience. Relevant experience can replace the degree.
• Active Top Secret clearance with SCI eligibility.
• DoD 8140 IAT II compliant certification.
• Hands-on experience designing, deploying, operating and maintaining enterprise development security platforms, secure or vetted package management solutions, and SecOps CI/CD solutions for hybrid applications across multiple classification levels.
• Substantial hands-on DevOps or DevSecOps experience supporting enterprise applications.
• Working knowledge of CI/CD tools and pipelines.
• Understanding of application security, secure coding and common vulnerability types such as the OWASP Top 10.
• Experience integrating security into SDLC and CI/CD pipelines, including dependency scanning, container scanning and secrets management.
• Experience with configuration management, endpoint management and IT configuration management.
• Ability to mentor and influence development teams on secure engineering practices.
• Strong problem-solving skills and the ability to design scalable, reliable and secure automation.
• Strong communication skills and the ability to build trusted relationships with technical and non-technical stakeholders.

Conditions

US citizenship required.

Onsite in Washington, DC, USA.

40 scheduled hours per week.

Travel of less than 10%.

The likely salary range is $110,500 to $149,500. This is not a guarantee. Pay depends on experience, geographic location and possibly contractual requirements, and may fall outside this range.

Identity verification uses biometrics and AI to confirm authenticity and prevent fraud. You must be on camera for virtual interviews, your photo may be taken, and by proceeding you authorize use of your biometric data for verification and security.

Equal opportunity employer, including individuals with disabilities and protected veterans.

Benefits

• Medical plan options, some with HSA options, plus dental and vision plans.
• A 401(k) that accepts pre-tax and post-tax contributions up to IRS limits, with a company match.
• Flexible work weeks where possible.
• Paid time off including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness and business travel accident insurance, provided or available.