DevSecOps Engineer (Mid)

Accountabilities

• Design, develop, maintain, and optimize GitLab CI/CD pipelines supporting automated software delivery and infrastructure operations.
• Build modular, reusable Infrastructure as Code configurations using Terraform across AWS and other cloud environments.
• Automate configuration and operational activities within Kubernetes or comparable container orchestration environments.
• Support cloud networking and routing, including DNS, TLS, and ingress/egress configurations.
• Maintain, secure, and harden cloud and container base images in accordance with applicable security requirements.
• Support cloud-based risk assessments by identifying threats, applicable vulnerabilities, likelihood of occurrence, and potential impacts within established risk tolerances.
• Develop recommendations for corrective actions and mitigation strategies based on identified cybersecurity and infrastructure risks.
• Perform automated and manual validation of Information Assurance Controls and Validation Procedures in accordance with DoD guidance, CNSSI 1253, NIST 800 publications, and applicable security requirements.
• Validate, troubleshoot, document, and continuously improve DevSecOps engineering implementations.
• Develop and maintain technical documentation covering infrastructure, services, processes, and operational procedures for cloud application development teams.
• Participate in Agile planning, including task definition, technical solution development, implementation, and testing of deployed systems.
• Investigate issues identified through quality reviews and develop effective technical solutions.
• Use scripting and automation to improve infrastructure management, operational efficiency, and system reliability.
• Contribute to technical assessments involving system cost, efficiency, performance, and security posture.
• Develop infrastructure testing procedures, automation, programming, and supporting documentation.
• Identify creative technical solutions that improve system capabilities, security, reliability, and overall product offerings.
• Collaborate with technical writers to produce clear, customer-focused documentation and operational materials.
• Coordinate with project teams to ensure adherence to policies, quality objectives, technical requirements, and delivery milestones.

Requirements

• At least 6 years of relevant experience, including experience in at least three areas such as systems or software requirements, design, development, verification and validation, integration, build and deployment, systems administration, information assurance, business analysis, development environment tools, or technical documentation for C4ISR or federal IT systems.
• At least 2 years of related IT experience involving DevOps/DevSecOps engineering, CI/CD, build and release, Site Reliability Engineering (SRE), operations engineering, systems integration, and/or cloud administration.
• High school diploma or GED required, along with technical training in Information Technology, software application development, or a related discipline.
• Demonstrated experience evaluating or assessing systems in government cloud environments using DevSecOps principles and continuous security practices.
• Strong understanding of Infrastructure as Code, with hands-on experience using Terraform, AWS CloudFormation, or comparable technologies.
• Hands-on experience with Docker and Kubernetes, Rancher, OpenShift, Fargate, or another container orchestration platform.
• Experience with infrastructure automation and DevOps integration.
• Demonstrated experience developing and managing Continuous Integration and Continuous Delivery environments.
• Valid CompTIA Security+ certification or equivalent meeting at least DoD 8570.1-M IAT Level II requirements, or the ability to obtain the certification within a reasonable timeframe.
• DoD 8570-compliant certifications are required to support privileged access requirements.
• Active Interim Secret clearance or favorable T3-equivalent background investigation required, with the ability to obtain a favorable T5-equivalent background investigation.
• U.S. citizenship required.
• Strong troubleshooting, analytical, documentation, and problem-solving skills.
• Ability to work effectively within Agile teams and collaborate with technical and cross-functional stakeholders.
• Ability to travel to three annual PI Planning events and participate in ad hoc technical exchange meetings as required, primarily in Norfolk, VA; San Diego, CA; and Charleston, SC.

Preferred Qualifications:

• Hands-on experience with Jenkins, GitLab, HashiCorp Vault, Argo CD, Red Hat Enterprise Linux, and Amazon EKS.
• Strong understanding of DISA Security Technical Implementation Guides (STIGs).
• Additional experience with cloud security, Kubernetes security, CI/CD automation, or federal cybersecurity environments.

Benefits

• Opportunity to support mission-critical technology and cybersecurity initiatives in a U.S. Navy and federal environment.
• Hands-on experience with modern DevSecOps, cloud, Kubernetes, Infrastructure as Code, CI/CD, and automation technologies.
• Opportunity to work with technologies including AWS, Terraform, GitLab, Docker, Kubernetes, and related cloud-native platforms.
• Professional growth through exposure to complex systems engineering, continuous security, and federal technology environments.
• Participation in Agile engineering teams and technical initiatives involving infrastructure, software development, integration, and testing.
• Opportunities to collaborate with experienced engineers and technical specialists on challenging mission-focused projects.
• Travel opportunities for PI Planning events and technical exchange meetings.