DevSecOps Engineer

The DevSecOps Engineer is a hands-on practitioner responsible for building, automating, and sustaining the delivery infrastructure that enables mission-critical software to move fast without compromising compliance. You will actively build and maintain CI/CD pipelines, harden and manage Kubernetes environments, automate security compliance, and leverage AI as a force multiplier across the entire delivery lifecycle. When team capacity demands it, you will contribute directly to feature development - bringing a security-first perspective to application code. This is a remote position.

Primary Responsibilities

* Design, implement, and maintain automated CI/CD pipelines that carry code from development through security scanning, compliance validation, and deployment into Navy and DoD environments

* Build and maintain hardened Kubernetes environments aligned to DISA STIG requirements across cloud and restricted network deployment contexts

* Automate security artifact generation including SBOM production, CVE scanning, and continuous compliance validation

* Drive adoption of Infrastructure as Code, GitOps practices, and controls-as-code across the team

* Leverage AI tooling to accelerate pipeline development, vulnerability triage, compliance remediation, and operational documentation

* Partner closely with software engineers, systems engineers, and ISSEs to embed security and compliance requirements from the start of development

* Maintain and evolve deployment infrastructure across multiple secure environments, including cloud and air-gapped or intermittently connected contexts

* Support ATO processes through automated evidence generation, documentation as code, and direct collaboration with the security team

* Establish and promote standards for pipeline design, container security, secrets management, and deployment consistency

* Contribute to feature development when team capacity requires, applying security-first development practices to application code

* Maintain operational documentation including runbooks, deployment guides, and architecture diagrams as version-controlled artifacts

Required Skills and Experience

Active Secret security clearance

*4+ years of professional DevSecOps or DevOps engineering experience

* Hands-on experience designing and maintaining CI/CD pipelines using GitLab CI; experience with additional pipeline tools a plus

* Experience with Kubernetes administration and hardening in DoD or compliance-driven environments - RKE2 or K3S experience strongly preferred

* Experience implementing DISA STIG compliance in containerized and Linux environments (RHEL or Rocky Linux)

* Proficiency with Infrastructure as Code tooling, particularly Terraform

* Experience with Helm chart authoring and Kubernetes deployment management

* Experience with automated security scanning, SBOM generation, and CVE triage and remediation

* Scripting proficiency in Python or Bash for pipeline and operational automation

* Demonstrated use of AI tooling to accelerate engineering workflows

* Background contributing to application feature development alongside infrastructure work

* Ability to operate independently and manage workload across competing priorities in a small, fast-moving team

Preferred Qualifications

* Experience operating in air-gapped or disconnected network environments

* Experience supporting ATO through automation, documentation, and technical leadership

* Experience with secrets management tooling such as Vault, Sealed Secrets, or SOPS

* Familiarity with observability and monitoring tools such as Prometheus or Grafana

* Certified Kubernetes Administrator (CKA) or willingness to obtain upon onboarding

* Experience applying "as code" approaches beyond infrastructure (e.g., configuration-as-code, policy-as-code, workflows-as-code, documentation-as-code)

Education and Certification Requirements

* BS degree in Computer Science or related field

* Active Security+ certification or equivalent IAT Level II certification

We use E-Verify to confirm the identity and employment eligibility of all new hires.

The anticipated salary range for this role is $90,000 to $95,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.