DevSecOps Engineer

Overview

Galapagos Federal Systems LLC is seeking a motivated and highly qualified Dev Sec Ops  Engineer to support the integration of development, security, and operations practices within a mission-critical Department of Defense (DoD) system. This role enables the continuous delivery of secure, high-quality software supporting more than 6,500 users across the DoD enterprise, including coordinators, victim advocates, and legal, investigative, and command personnel.

In this position, you will help maintain and enhance a system that manages sensitive case-level data, requiring strict adherence to DoD cybersecurity standards and security controls. Working within an Agile development environment, you will participate in regular sprint cycles delivering bug fixes, urgent priority updates, and minor system enhancements while ensuring the platform maintains system availability of 99.5% or higher.

The ideal candidate will bring strong experience in CI/CD pipeline automation, secure development practices, and Dev Sec Ops  methodologies, along with a solid understanding of the DoD Risk Management Framework (RMF). Your contributions will help ensure the system remains secure, resilient, and capable of supporting evolving mission requirements.

• Design, implement, and maintain Dev Sec Ops  CI/CD pipelines that support secure, automated software delivery
• Automate functional testing and integrate automated test cases into the Dev Sec Ops  pipeline prior to deployment authorization
• Ensure system deliverables are architected to fully leverage Continuous Integration and Continuous Delivery (CI/CD) capabilities
• Support quarterly Agile sprint cycles, delivering bug fixes, emergency priority updates, and minor system enhancements
• Apply DoD Application Security and Development (ASD) STIG requirements to software architecture, development, and deployment processes
• Implement secure coding best practices, including adherence to OWASP security principles
• Conduct application security scans using tools such as Fortify and Sonatype, and remediate or mitigate identified vulnerabilities in accordance with Cyber Hardening Policies
• Support the migration and deployment of applications to Cloud Service Providers (CSPs) in compliance with the DoD Cloud Computing Security Requirements Guide (SRG)
• Operate and maintain development, test, and production environments within IL4 or IL5 cloud environments supporting Controlled Unclassified Information (CUI)
• Collaborate with development, operations, and security teams to ensure systems remain secure, compliant, and operationally resilient

• The Dev Sec Ops  Engineer Must Have
• DoW Clearance not Required. Ability to obtain and maintain a Tier 3 (T3) background investigation for Noncritical-Sensitive position;
  Tier 5 (T5) required for privileged access role
• Prior experience supporting DMDC or DHRA systems
• Experience designing and managing CI/CD pipelines and Dev Sec Ops  automation frameworks
• Experience working within AWS Gov Cloud or other DoD-authorized cloud environments
• Strong technical experience with Oracle databases, SQL, Apache, and Tomcat environments
• Experience with Dev Sec Ops  and security tools such as Jenkins, Fortify, Sonatype, and JIRA
• Knowledge of DoD Risk Management Framework (RMF) processes and eMASS
• Experience implementing NIST SP 800-53 security controls and DISA STIG requirements
• Familiarity with Agile/Scrum development methodologies
• Strong understanding of secure coding practices and OWASP security standards
• Experience with Micro Strategy reporting platforms

• Required
• U.S. Citizenship
• CompTIA Security+ CE (DoW 8140/8570 compliant)

• Preferred
• Bachelor's degree in Engineering, Computer Science, Information Technology, Systems Engineering, or a related technical discipline
• DoW 8140 cybersecurity workforce certifications

• Medical, dental, vision, disability, and life insurance
• Flexible Spending Accounts
• 401(k)
• PTO
• Paid Parental Leave
• Tuition reimbursement
• Paid federal holidays

Must be a U.S. Citizen. A high-level Department of Defense active security clearance is/may be required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information.

Work may involve sitting or standing for extended periods of time and typing and reading from a computer screen. The candidate must have enough mobility, including bending, reaching, and kneeling, to complete daily duties in a prompt and efficient manner, and that may include lifting up to thirty pounds, as necessary.

Headquartered in Hawaii, Galapagos Federal Systems, LLC, is an SBA-Certified NHO-owned 8(a) Small Business specializing in global information technology solutions. We deliver professional services in IT Design & Installation, Cybersecurity Engineering & Support, Application Integration & Development, Software & Hardware Engineering, Network &…