Mid Level DevSecOps Engineer

Overview

Scott Air Force Base, United States | Posted on 03/12/2026

We are looking for a Mid-Level Dev Sec Ops  Engineer to build and enhance the automation technologies that power a critical mission planning system for our government customer. This role is important to ensure secure, reliable, and scalable automated delivery of infrastructure and applications.

This position will require at least two days per week of work on-premise at Scott AFB.

• Infrastructure Automation: Implement and extend Infrastructure-as-Code (IaC) to support consistent, repeatable, and secure environments across development, testing, and production.
• Build and Evolve CI/CD Pipelines: Develop and maintain automated Continuous Integration / Continuous Delivery (CI/CD) pipelines for rapid, secure, and error-free deployments with no disruption in service to mission partners.
• Implement Dev Sec Ops  Best Practices: Integrates security controls, compliance requirements, automated testing, and observability directly into build and deployment workflows.
• Security: Implement security mitigations from ACAS findings, STIG Guidelines, CIS Benchmarks, Zero Trust requirements, and other security standards as required by the program.
• Collaborate: Work closely with development, testing, security, and scrum masters to plan and execute IaC in response to business need.
• Continuous Improvement: Identify opportunities to optimize builds, deployments, and operational processes through automation and standardization.
• Networking and Infrastructure Integration: Automate network configurations, security groups, VPNs, load balancers, and firewalls within cloud and hybrid environments to ensure secure, resilient connectivity.
• Follow Agile Development Methodologies: Actively participate in the Agile development process by breaking epics into stories, adding acceptance criteria, estimating stories in points, and updating stories in Jira.
• Monitoring and Reliability Engineering: Engineer automated monitoring, alerting, and system observability to improve system visibility, reliability, and resilience. Support the monitoring of all customer-facing environments during working hours.
• Respond to System Issues: Respond to issues in all environments by providing troubleshooting expertise, repair actions, and root cause analysis. For root causes that can be fixed by Dev Sec Ops , create an Epic, define the changes required, and work through the Agile development process to implement and deploy the fix.
• Provide On-Call Support: at least one week per month, be available via phone and no further than 1 hour from Scott AFB.
• Creates self-healing automation: that triggers when issues occur to avoid being called for support on nights and weekends.
• Support Kubernetes and Containerization: by collaborating / contributing to the creation of IaC for Kubernetes cluster deployment, security, and maintenance. Support the containerization of system components, providing developers with the tools and automation required for rapid declarative deployments. Extend the containerization automation through Git Ops tools and methodologies.

• Passionate about automation
• Flexible with requirement changes
• Able to work with minimal direction
• Thrives when collaborating with a small team
• Knows when to ask for help when blocked
• Ready to continually learn AWS and Kubernetes on-the-job

• Bash Scripting
• Public Key Infrastructure (certificate generation and management, mTLS communication)
• Networking and routing, especially in cloud environments and through DoD firewalls
• Mongo
  
  DB, IBM Data Power, Identity and Access Management, Queueing systems
• Agile methodology

• Technical Expertise: Proven experience with tools such as Terraform, Ansible, Jenkins, Git Lab CI, or similar for IaC and CI/CD automation.
• Cloud and Containerization: Strong background in cloud infrastructure (AWS, Azure, or Gov Cloud) and willing to learn container orchestration (Kubernetes, Docker).
• Security Automation: Hands-on experience implementing Dev Sec Ops  practices, including automated security scanning, compliance validation, and vulnerability management.
• Scripting: Proficiency…