DevSecOps Engineer with Security Clearance

Job Type
Full-time Description
Hyer Tek is a federal technology consulting firm delivering secure enterprise applications, data analytics, and modernization services to federal government agencies. Hyer Tek is hiring a Sr. Dev Sec Ops  Engineer to own the software supply chain and delivery pipeline behind our federal solutions — from a developer's commit through hardened container build, automated security gating, signed artifact, and accredited release into Azure Government enclaves at DoD Impact Levels 5, 6.

and into sensitive compartmented environments. You will make security a property of the pipeline rather than a review at the end of it, and you will produce the continuous evidence that keeps an Authority to Operate current.

Location:

This is a hybrid on-site position at Fort George G. Meade, Maryland. Candidates must be located in, or willing to relocate to, the Baltimore–Washington corridor within commuting distance of Fort Meade. Work is performed in accredited/SCIF facilities at least 2-3 days per week. Requirements
- Design, maintain, and improve secure CI/CD pipelines using Git Hub Actions and Azure Dev Ops across multiple repositories and environments, including disconnected or air-gapped deployments.
- Build and maintain secure containerized applications for Kubernetes platforms such as AKS and Open Shift.
- Integrate automated security and compliance checks into development pipelines, ensuring critical findings are resolved before release.
- Implement secure artifact management practices, including software bills of materials (SBOMs), artifact signing, provenance, and controlled promotion between environments.
- Manage secrets and environment-specific configuration using approved vault and configuration-management solutions.
- Automate compliance evidence, configuration monitoring, audit logging, and security reporting in support of RMF and ATO requirements.
- Improve application and pipeline observability, reliability, and operational readiness through logging, monitoring, testing, and incident-response practices.
- Develop and validate backup, recovery, and disaster-recovery procedures with documented recovery objectives.
- Partner with developers, cybersecurity engineers, and operations teams to resolve vulnerabilities, improve delivery processes, and support production deployments.
- Create clear technical documentation, operational runbooks, and customer-handoff materials.

Required Qualifications
- 5+ years of hands-on Dev Ops or Dev Sec Ops  engineering experience, including responsibility for production CI/CD pipelines in a regulated or security-sensitive environment.
- Strong working knowledge of Git Hub Enterprise, including Git Hub Actions, repository and organization configuration, access controls, branch protection or rulesets, reusable workflows, and self-hosted runners.
- Experience designing and maintaining CI/CD pipelines in Git Hub Enterprise and Azure Dev Ops across multiple repositories and environments.
- Experience building secure container images using hardened base images, multi-stage builds, vulnerability scanning, minimal dependencies, and non-root runtimes.
- Production experience with Kubernetes platforms such as AKS or Open Shift, including deployment configuration, health probes, secrets integration, and admission-policy requirements.
- Experience integrating automated security controls into CI/CD pipelines, including source-code, dependency, secret, container, and infrastructure-as-code scanning.
- Working knowledge of secure software supply-chain practices, including SBOM generation, artifact signing, provenance, and controlled artifact promotion.
- Proficiency with Infrastructure as Code using Terraform, Bicep/ARM, or a comparable technology.

- Experience with Azure services such as Key Vault, managed identities, Azure Policy, Azure Monitor, Log Analytics, or Microsoft Sentinel.
- Strong scripting and automation skills using Python, Power Shell, JavaScript/Node.js, C#/.NET, or a comparable language.
- Strong Linux fundamentals and command-line troubleshooting skills.
- Familiarity with secrets management, centralized logging, monitoring, backup, recovery, and…