Software Engineer - Kubernetes/DevSecOps

Description

The company is the prime contractor on a program that builds and supports Identity, Credential, and Access Management (ICAM) capabilities for the Intelligence Community, in both enterprise and stand-alone deployments.

The program's core work covers program management, mission support, software integration and development, systems engineering, migration, testing, documentation, network and system monitoring, configuration control, and release management.

The team is a high-performing group that works on customer missions.

Responsibilities

• Act as a Software Engineer Level 3 and support the ZT ICAM team, DISA, and other Department of War customers with Kubernetes, DevSecOps, and software supply chain security work.
• Build and maintain the integrated Kubernetes deployment package, with configuration for single- and multi-namespace operation.
• Automate secure pipelines for building, testing, scanning, signing, packaging, and releasing software.
• Deploy and connect distributed policy administration, decision, attribute, and enforcement components, covering secure service communication, workload identity, synchronization, observability, and resilience across enterprise, multi-site, tactical, and disconnected settings.
• Partner with customer teams to assess their environments, adjust configurations, fix deployment problems, and write clear deployment and support documentation.

Requirements

• Required: Hold a TS/SCI clearance with polygraph.
• Required: Hold a bachelor's degree in computer science, computer engineering, software engineering, or a related field. 4 additional years of experience can replace the degree.
• Required: Have 8+ years of software engineering experience, including 3 years in SIGINT, Information Assurance, or Information Technology.
• Required: Have hands-on experience engineering, securing, upgrading, and troubleshooting production Kubernetes or RKE2 environments.
• Required: Know namespaces, workloads, services, ingress, ConfigMaps, Secrets, RBAC, network policies, persistent storage, DNS, and service discovery.
• Required: Have built configurable deployments with Helm, Kustomize, values files, or similar configuration tools, and packaged Docker or OCI images.
• Required: Work comfortably with Linux, scripting, Git, CI/CD, automated testing, security scanning, artifact publishing, and coordinated releases.
• Required: Have implemented software supply chain controls such as SBOMs, vulnerability management, artifact signing, provenance, and remediation tracking.
• Required: Have led technical reviews, supported customer deployments and troubleshooting, written technical documentation, and mentored engineers on Agile teams.
• Desired: Have experience with single- and multi-namespace deployments, minimal test environments, upgrades, rollback, scaling, and high availability.
• Desired: Have deployed distributed policy, attribute, decision, and enforcement services using workload identity, mutual TLS, certificate management, secrets management, and least privilege.
• Desired: Have supported policy and attribute synchronization, local decision availability, observability, recovery, and degraded operation across multi-site or disconnected environments.
• Desired: Have worked with Rancher, Kubernetes operators, Harbor or comparable registries, admission controls, image promotion, and container hardening.
• Desired: Know Zero Trust, ICAM, Attribute-Based Access Control, OAuth 2.0, OpenID Connect, SAML, LDAP, PKI, and service-to-service authorization.
• Desired: Have supported DISA or other DoW customers and produced deployment guides, reference configurations, application onboarding criteria, and release documentation in Jira and Confluence.

Conditions

Full-time, regular position with up to 10% local travel.

All positions are based in the Hanover, MD area.

Minimum clearance to start is TS/SCI with polygraph.

The proposed salary range is $113,200 - $237,800.

Final pay depends on factors including location, Federal Government contract labor categories and wage rates, prior relevant experience, specific skills, education, and certifications.

Benefits

• Competitive compensation and learning and development opportunities.
• Flexible time off that lets you take the time you need.
• Access to robust learning resources.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.