DevSecOps Engineer - IronSled - Clearance

Position: DevSecOps Engineer - IronSled - Clearance Preferred

Overview

LMI is looking for an expert Dev Sec Ops  Engineer to join our exciting and innovative team to support transforming and modernizing how the United States Army delivers software.

This is a 100% remote role with quarterly travel for in person team planning and collaboration events. Active Secret clearance preferred; but will consider candidates that are eligible to obtain a secret clearance. You must be a U.S. citizen.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors—helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

The Dev Sec Ops  Engineer will work as Iron Sled’s Deployment Engineer. As a Deployment Engineer, you will be responsible for working with internal application teams to help them deploy onto Iron Sled in various environments.

Iron Sled is LMI’s Dev Sec Ops  platform that serves as the central hub for all software development projects. Iron Sled allows internal and external users to set up development environments with just a few clicks:

• Access standardized tools and resources
• Build applications using secure, pre-approved components
• Deploy and manage applications throughout their lifecycle
• Monitor application performance and security

Continuous Integration/Continuous Deployment (CI/CD)

• Design, implement, and manage CI/CD pipelines in Gitlab to ensure efficient and reliable software delivery.
• Integrate security tools and practices into CI/CD workflows to detect and mitigate risks early.
• Familiar with implementation of deployment strategies including blue/green, canary, and A/B testing.

Automation and Scripting

• Develop and maintain automation scripts to streamline and enhance deployment processes.
• Advise on and implement configuration management tools for consistent environment setup.
• Develop and manage automated deployment and configuration of Kubernetes clusters.
• Support configuration of automated testing including functional, integration, end-to-end, resilience, and disaster recovery.

Security Integration

• Implement security measures and controls within CI/CD pipelines.
• Develop and employ automated, regular, pre and post-deployment security assessments and vulnerability scans and testing.
• Ensure compliance with Army and Department of Defense (DoD) security standards and policies.
• Provide direct technical input into security remediation documentation.

Monitoring and Incident Response

• Set up and maintain monitoring and logging solutions to detect and respond to incidents in real-time.
• Collaborate with security teams to investigate and remediate security incidents and breaches.

Collaboration and Communication

• Work closely with development, operations, and security teams to ensure seamless integration of security practices.
• Provide training and guidance to team members on security best practices and Dev Sec Ops  methodologies.
• Directly coordinate with Government service and resource providers to implement technical solutions.

Infrastructure as Code (IaC)

• Utilize AWS specific IaC tools (i.e. Cloud Formation, SAM, CDK) to manage and provision infrastructure.
• Ensure infrastructure is secure, scalable, and compliant with Army requirements.

Risk Management

• Identify and address potential security risks and vulnerabilities throughout the development lifecycle.
• Implement risk mitigation strategies and conduct regular risk assessments.

Compliance and Documentation

• Ensure all systems and applications comply with relevant regulations and standards (e.g., NIST, FISMA, RMF).
• Provide Dev Sec Ops  technical input to comprehensive documentation of security…