DevSecOps Engineer

Privacy Policy

Job Openings

Arlington, Virginia

Employment Type

Full-Time

The Dev Sec Ops  Engineer shall serve as the lead technical engineer responsible for designing, implementing, securing, automating, and sustaining the cloud infrastructure supporting the Office of Naval Research (ONR) Data & Analytics environment. The Dev Sec Ops  Engineer shall lead the implementation and execution of the technical requirements identified in PWS Section 4.5 – Technical Infrastructure and Platform Support, including infrastructure automation, Continuous Integration/Continuous Deployment (CI/CD), cloud security, container orchestration, Infrastructure-as-Code (IaC), and operational sustainment of the FedRAMP High and DoD Impact Level 5 (IL5) cloud environment.

The Dev Sec Ops  Engineer shall architect and maintain secure cloud infrastructure, automate deployment pipelines, support AI/ML platform integration, implement cloud-native security controls, monitor system health and security events, and ensure compliance with DoD cybersecurity requirements. This position will work closely with software developers, data engineers, cloud architects, cybersecurity personnel, and Government stakeholders to deliver resilient, scalable, and secure cloud services.

• Design, deploy, automate, and maintain secure cloud infrastructure supporting mission applications and analytics platforms.
• Develop, implement, and manage automated CI/CD pipelines using tools such as Jenkins, Git Lab CI/CD, or equivalent technologies.
• Build and maintain Infrastructure-as-Code (IaC) solutions utilizing Terraform, Ansible, or similar automation frameworks.
• Implement and manage containerized application environments using Docker, Kubernetes, or comparable orchestration platforms.
• Configure, monitor, and optimize cloud-native security services including Web Application Firewalls (WAF), Intrusion Detection/Prevention Systems (IDS/IPS), endpoint protection, and Security Information and Event Management (SIEM) platforms.
• Analyze security logs, audit events, vulnerability reports, and SIEM alerts to identify threats, recommend mitigation strategies, and support incident response activities.
• Support continuous Authority to Operate (ATO) compliance through configuration management, security patching, vulnerability remediation, and security documentation.
• Implement secure API management, identity and access management (IAM), secrets management, encryption, and least-privilege access controls.
• Develop automated monitoring, logging, alerting, and operational dashboards to improve system reliability and performance.
• Support deployment and operationalization of AI/ML platforms and services, including cloud-native machine learning environments.
• Collaborate with software developers, data engineers, and cloud architects to integrate security throughout the software development lifecycle (SDLC).
• Ensure cloud infrastructure complies with DoD cybersecurity policies, FedRAMP High requirements, DoD IL5 controls, and applicable security frameworks.
• Support system scalability, resilience, disaster recovery, and operational continuity.
• Document system architectures, deployment procedures, security configurations, and operational processes.

The Dev Sec Ops  Engineer shall meet the requirements for the "Dev Sec Ops  Engineer – Intermediate" labor category as defined in the CHESS ITES-3S contract vehicle and possess the following additional qualifications:

• Seven (7) years of combined experience in Dev Sec Ops , Dev Ops, Sec Ops, or MLOps engineering and development.
• Five (5) years of hands‑on experience designing, securing, implementing, and maintaining cloud environments, preferably within AWS Gov Cloud, Azure Government, or similarly regulated cloud environments.
• Demonstrated experience supporting cloud environments operating under FedRAMP High, DoD Impact Level 5 (IL5), or comparable federal security requirements.
• Verifiable experience on at least two (2) projects designing, implementing, and managing Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins, Git Lab CI/CD, Azure Dev Ops, Git…