Senior DevSecOps Engineer

• →Pipeline Operations & Management: Maintain, optimize, and operate automated CI/CD pipelines using platforms such as Jenkins and GitLab CI/CD.
• →Automated Security Integration: Seamlessly integrate security tools and controls directly into the CI/CD pipeline, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and container/dependency scanning.
• →Test Automation: Implement and maintain robust automated testing frameworks across unit testing, integration testing, and User Acceptance Testing (UAT).
• →Vulnerability Management: Collaborate closely with development teams to identify, prioritize, and remediate application and infrastructure security vulnerabilities.
• →Compliance & Governance: Enforce and maintain strict compliance with government and organizational security regulations and standards.
• →Architecture & Strategy: Design resilient Policy-as-Code workflows and lead security posture improvements across multi-environment deployment platforms.

• Clearance: Must be a US Citizen holding an active TS/SCI security clearance with an active Full-Scope Polygraph.
• Education: Bachelor's degree in Computer Science, Information Systems, Engineering, or a related technical field.
• Professional Experience: Minimum 7+ years building and maintaining automated CI/CD pipelines.
• Infrastructure Automation: Minimum 3+ years of experience with automation tools for infrastructure provisioning and configuration management.
• Version Control: Proficiency with Git, GitLab, Jira, and associated developer ecosystem tools.
• Systems Administration: Strong background in Linux systems administration and fundamental networking principles.
• Soft Skills & Mindset: Superior troubleshooting skills, strong collaboration abilities, and the capability to articulate complex technical ideas clearly to both technical and non-technical audiences.
• Security Discipline: Unwavering commitment to strict security protocols and DevSecOps best practices.

• Programming & Scripting: Proficiency in languages such as Python, Go, Bash, or C/C++.
• Containerization: Strong practical experience with containerized software practices (Docker, Podman).
• Agile Frameworks: Experience working within Agile/Scrum software development methodologies.
• Cloud Architecture: Multi-cloud infrastructure experience across AWS, Azure, or GCP.
• Security Scanning Tooling: Hands-on experience with modern scanner suites (e.g., SonarQube, Snyk, Trivy, OWASP ZAP).

US Citizenship with an active TS/SCI security clearance with Full-Scope Polygraph

• Container Security & Governance: Advanced Kubernetes orchestration security, admission controllers (e.g., Open Policy Agent/OPA, Kyverno), runtime security monitoring (e.g., Falco), and pod security standards.
• Secrets Management: Hands-on implementation of enterprise secrets managers (e.g., HashiCorp Vault, AWS Secrets Manager) for automated secret rotation and dynamic injection.
• GitOps & Modern Continuous Delivery: Deep experience implementing GitOps operational models using tools such as ArgoCD or Flux.
• Full-Stack Observability & Telemetry: Experience deploying end-to-end monitoring, centralized logging, and metrics stacks (e.g., Prometheus, Grafana, ELK/OpenSearch, OpenTelemetry).

• Certified Kubernetes Administrator (CKA) / Certified Kubernetes Security Specialist (CKS)
• AWS Certified DevOps Engineer / Azure DevOps Engineer
• CompTIA Security+, CISSP, or Certified DevSecOps Professional (ADP)

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.