DevSecOps Engineer

JT4, LLC provides engineering and technical support to multiple western test ranges for the U.S. Air Force, Space Force, and Navy under the Joint Range Technical Services Contract, better known as J-Tech II. JT4 develops and maintains realistic, integrated test and training environments and prepares our nation's war-fighting aircraft, weapons systems, and aircrews for today's missions and tomorrow's global challenges.

JOB SUMMARY -- ESSENTIAL/FUNCTIONS DUTIES

A DevSecOps Engineer will manage, design, automate, and secure continuous integration and continuous delivery (CI/CD) pipelines from the group up across on-premises, air-gapped, and secure cloud environments (AWS FENCES). They will create a "Security-as-Code" and developer enablement across our software development networks. Working in close collaboration with a Senior DevSecOps Engineer, Platform/Kubernetes Engineers, System Administrators, Cybersecurity Analysts, and AI Subject Matter Experts, you will build automated security and compliance gates and accelerate secure software delivery across multiple hybrid boundaries. 

Employee will be responsible for the following functions/duties:

1. CI/CD Pipeline Design & Implementation

• Design, build, test, and maintain robust, end-to-end automated CI/CD pipelines utilizing modern source control and pipeline orchestration platforms (GitHub Actions, and AWS developer tooling such as AWS CodeCommit and AWS CodeDeploy).
• Standardize branching strategies, automated release versioning, artifact staging, and promotion workflows across development, test, and production environments. Implement and configure Sonatype Nexus Repository.
• Partner with software development and engineering teams to troubleshoot build failures, improve deployment velocity, and eliminate developer friction.

2. Pipeline Security & Automated Compliance (DevSecOps) 

• Embed automated security gates such as Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) into active pipelines. 
• Software Bill of Materials (SBOM) generation and open-source dependency analysis.
• Container Image Scanning for base image vulnerabilities, misconfigurations, and compliance issues prior to deployment.
• Enforce automated policy-as-code and configuration validation to ensure software artifacts comply with cybersecurity baselines before deployment.
• Collaborate closely with Cybersecurity Analysts to translate compliance policies into automated pipeline checks.

3. Build Infrastructure & Runner Orchestration 

• Deploy, scale, and optimize containerized build execution environments, specifically deploying and managing Actions Runner Controller (ARC) for self-hosted GitHub Actions runners on Kubernetes. 
• Maintain internal package repositories and manage automated container image builds and promotion to AWS Elastic Container Registry (ECR) and on-premises registries.
• Manage runner autoscaling, caching, and clean execution state to ensure high-performance, reproducible builds.

4. Cloud & Hybrid Infrastructure as Code (AWS FENCES) 

• Define and provision reproducible pipeline infrastructure using Infrastructure as Code (IaC) (e.g., Terraform, AWS CloudFormation).
• Leverage and configure core AWS services supporting software development and staging: EC2, S3, VPC, IAM, Lambda, Network and Application Load Balancers (NLB/ALB), and AWS Elastic Kubernetes Service (EKS).
• Support secure cross-domain synchronization and artifact transfer between on-premises developer networks and AWS FENCES

5. PKI, Secrets & Certificate Operations 

• Implement secure secrets management solutions across CI/CD workflows, eliminating plaintext credentials, tokens, and private keys.
• Manage the issuance, rotation, and lifecycle of SSL/TLS certificates across Linux build agents, containerized tools, and webhooks to ensure end-to-end transport encryption.

DESIRED QUALIFICATIONS

REQUIREMENTS -- EDUCATION, TECHNICAL, AND WORK EXPERIENCE 

One of the following educational requirements must be met for this position:

1. A bachelor’s degree in an associated discipline and a minimum of four years of related experience
2. A master’s degree in an associated discipline and a minimum of two years of experience
3. A PhD in an associated discipline

In addition, a Computer Scientist III must possess the following qualifications:

• Experience with computer-based systems and applications
• Programming skills in languages used for job-specific programming tasks
• Familiarity with the application of industry standard hardware and software design and documentation techniques
• Experience with systems engineering and software development lifecycles
• Effective oral and written communication skills
• Good planning/organizational skills

BENEFITS

OTHER RESPONSIBILITIES

Each employee must read, understand, and implement the general and specific operational, safety, quality, and environmental requirements of all plans, procedures, and policies pertaining to their job.

WORKING CONDITIONS

Work is performed in a typical office environment with no unusual hazards. Occasional lifting (up to 20 pounds), constant sitting while using the computer terminal, constant use of sight abilities while reviewing documents, constant use of speech/hearing abilities for communication, and constant mental alertness are required.

Travel to remote company work locations may be required.

DISCLAIMER

The above statements are intended to describe the general nature and level of work being performed by personnel assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of persons so classified.

Tasking is in support of a federal government contract that requires U.S. citizenship. Some jobs may require a candidate to be eligible for a government security clearance, state-issued driver's license or other licenses / certifications and the inability to obtain and maintain the required clearance, license or certification may affect an employee's ability to maintain employment.

SCC: JSD12; JCORP12