About the role

  • Lead design, implementation, and ongoing management of secure CI/CD pipelines for the DCMA CAFM SaaS environment
  • Enforce DevSecOps best practices by automating vulnerability scanning, code analysis, compliance checks, and remediation processes
  • Collaborate with software developers, cybersecurity analysts, and system administrators to architect highly available, scalable, and compliant cloud-based solutions in accordance with FedRAMP and DoD STIGs
  • Maintain, monitor, and improve infrastructure-as-code deployments, configuration management, and patch management across development, test, staging, and production environments
  • Ensure systems, services, and tools meet RMF, NIST 800-53, IL4, and other DoD cybersecurity requirements and support FISMA compliance
  • Automate deployment, monitoring, backup, and disaster recovery strategies to ensure resilience and business continuity
  • Lead efforts to assess and mitigate risks associated with software supply chain, open-source software usage, and third-party integrations
  • Document DevSecOps processes, configuration changes, and provide training and mentorship to intermediate DevSecOps and development team members
  • Evaluate new tools and technologies to enhance automation, monitoring, and security
  • Participate in Agile sprints, provide input to sprint planning, and collaborate in cross-functional team meetings to align DevSecOps activities with project objectives

Requirements

  • Bachelor’s Degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related technical field
  • Minimum 7 years’ experience in DevOps/DevSecOps roles
  • At least 3 years supporting cloud-based (SaaS) solutions in DoD, federal, or critical infrastructure environments
  • Demonstrated expertise in deployment and administration of secure CI/CD pipelines
  • Experience with container orchestration (Docker, Kubernetes)
  • Experience with infrastructure-as-code tools (Terraform, Ansible)
  • Experience implementing security automation tools for code analysis, vulnerability scanning, and compliance validation
  • Deep knowledge of FedRAMP, NIST 800-53, RMF, and DoD cloud/security controls
  • Hands-on experience with cloud platforms (AWS GovCloud, Azure Government, or equivalent)
  • Proficiency with scripting languages (Python, Bash, PowerShell)
  • Proficiency with version control systems (Git, GitLab)
  • U.S. citizenship required
  • Preferred: Master’s Degree in Information Security, Computer Science, or related domain
  • Preferred: Experience supporting CAFM, asset management, or facilities management SaaS solutions in federal or DoD settings
  • Preferred: Experience conducting, documenting, and remediating Authority to Operate (ATO) packages and other formal system accreditation processes
  • Preferred: Industry certifications (Certified DevSecOps Professional (CDP), Certified Kubernetes Administrator (CKA), AWS Certified DevOps Engineer or Azure DevOps Expert, CompTIA Security+, CASP+, CISSP, GIAC Certified DevSecOps Professional)
  • Preferred: Familiarity with Section 508 accessibility requirements and secure software supply chain management
  • Preferred: Experience mentoring or leading DevSecOps teams

Benefits

  • Medical, Dental & Vision Coverage
  • Wellness Program
  • 401(k) Matching
  • Disability (Short Term & Long Term)
  • Employee Assistance Program
  • Life Insurance
  • Education & Training
  • Generous Leave Policy (11 Federal Holidays, PTO, and Military Leave)

Job title

Senior DevSecOps Engineer

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job