DevSecOps Engineer - Test Security Clearance

Position: DevSecOps Engineer - Test with Security Clearance
Job Title:

Dev Sec Ops  Engineer - Test Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type:
Regular Percentage of

Travel Required:

Up to 10% Type of Travel:
Continental US *
*
* The Opportunity:

CACI is seeking an experienced, hands-on, Dev Sec Ops  engineer to lead development of a CI/CD environment for a multi-tenant system with an emphasis on testing and hardening. This is a ground-up opportunity to architect and build comprehensive testing infrastructure and frameworks in a secure, containerized DoD environment. This role is perfect for someone who thrives in environments where they can shape and define testing standards and practices.

This role requires a test engineer who can balance strategic thinking with hands-on implementation. The ideal candidate is a self-directed technical leader who will take ownership of building our testing infrastructure, is comfortable working independently, and excels at creating structure where none exists-someone who can independently design testing strategies, implement automated CI/CD pipelines in Git Lab, and ensure all systems meet DoD DISA STIG requirements.

In this position, you will be the primary architect for integration testing across distributed services, security compliance validation, and Infrastructure as Code testing practices.

Experience with defense sector security requirements and active clearance eligibility are essential. Responsibilities:
* Establish testing standards, Dev Sec Ops  practices, and security compliance processes from the foundation up, working with Java-based microservices deployed on Kubernetes with RHEL 9

* Make critical decisions about tooling and frameworks while also writing test code, building pipelines, and hardening container deployments in Harbor and Kubernetes

* Coordinate review of relevant program documentation with Responsible Engineers

* Lead the test design; assist in DT&E I/FAT test planning, execution, and reporting.

* Integral member of the Integrated Product Team (IPT) for each system recap or deployment, ensuring system is ready for customer-witnessed acceptance tests and fielding

* Ensure test data are properly collected and recorded in a timely manner per the approved test plan Technical Environment:
* Operating System: RHEL9

* Development:
Java, Python, Typescript

* CI/CD:
Git Lab (with automated testing)

* Container Registry:
Harbor

* Orchestration:
Kubernetes

* Package Management:
Helm

* Security Compliance:
DoD DISA STIG

* Project Management: JIRA

* Documentation:
Confluence

Qualifications:

Required:

* Active TS/SCI clearance with Poly

* Active Comptia Security+ certification, or ability to obtain one within 90 days of hire

* Bachelor's degree in Computer Science, Engineering, or related discipline

* Strong experience managing Red Hat Enterprise Linux 9 (RHEL
9) systems

* Gitlab administration and CI/CD pipeline development experience

* In-depth knowledge of DoD DISA STIG security standards and compliance testing

* Experience with Dev Sec Ops  practices and integrating security into CI/CD pipelines

* Experience with integration testing of distributed systems and microservices

* Hands-on experience with Kubernetes container orchestration

* Experience with Helm for Kubernetes package management

* Proficiency with Git Lab CI/CD pipelines and runners

* Understanding of Infrastructure as Code (IaC) principles and testing

* Strong understanding of security testing methodologies and tools

* Experience using Atlassian tools for project management (JIRA, Confluence) Desired:
* Experience deploying and debugging DSP (Digital Signal Processing) software

* Experience developing, deploying, and troubleshooting Java applications

* Experience developing, deploying, and troubleshooting Python applications

* Wide breadth of experience with automated testing tools (Postman, REST Assured, Cypress, Selenium, etc.)

* Knowledge of container vulnerability scanning tools

* Knowledge of CVE remediation and container hardening

* Experience with security testing tools (SAST, DAST, SCA)

* Experience with IaC tools (Terraform, Ansible, etc.)

* Experience with performance and load…