DevSecOps Lead Engineer

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Dev Sec Ops  Lead Engineer to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag Data Solutions, a Koniag Government Services company, is seeking an experienced Dev Sec Ops  Lead Engineer to support the design, implementation, and management of Dev Sec Ops  practices, pipelines, and culture in support of the U.S. Small Business Administration (SBA). The ideal candidate is a senior-level engineering professional with deep expertise in Dev Sec Ops  methodologies, CI/CD pipeline development, security automation, and cloud-native technologies, and a proven track record of leading Dev Sec Ops  transformation efforts within complex federal government environments.

This individual will serve as the technical lead and subject matter expert for SBA's Dev Sec Ops  program, driving the integration of security into every phase of the software development lifecycle, accelerating the delivery of secure, high-quality software, and fostering a culture of collaboration, automation, and continuous improvement across SBA's development and operations teams.

The Dev Sec Ops  Lead Engineer will serve as the senior technical lead and SME for Dev Sec Ops  practices and implementation at the SBA, working closely with SBA's IT leadership, development teams, security teams, operations staff, and program managers to design, build, and continuously improve a robust Dev Sec Ops  program that enables the rapid, secure, and reliable delivery of software and infrastructure solutions in support of SBA's mission.

Principal responsibilities will include but are not limited to:

• Serve as the senior technical lead and SME for Dev Sec Ops  practices, pipelines, and culture at the SBA, providing expert guidance, strategic direction, and hands-on technical leadership to development, security, and operations teams across the organization.
• Lead the design, development, implementation, and continuous improvement of SBA's CI/CD pipelines and Dev Sec Ops  toolchain, ensuring pipelines are automated, secure, scalable, and aligned with SBA's software delivery and security requirements.
• Drive the integration of security practices, tools, and automation throughout the software development lifecycle (SDLC), including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), container security scanning, and infrastructure as code (IaC) security scanning.
• Lead the development and implementation of SBA's Dev Sec Ops  strategy, roadmap, and standards, ensuring alignment with federal Dev Sec Ops  guidance, SBA's enterprise architecture framework, and industry best practices.
• Oversee the design, implementation, and management of infrastructure as code (IaC) practices and tools, enabling automated, repeatable, and auditable provisioning and management of SBA's IT infrastructure and cloud environments.
• Collaborate with SBA's development, security, and operations teams to establish and enforce Dev Sec Ops  standards, coding best practices, security requirements, and quality gates within the CI/CD pipeline.
• Lead the evaluation, selection, and implementation of Dev Sec Ops  tools and platforms, including source code management, CI/CD orchestration, container orchestration, artifact management, security scanning, and monitoring solutions appropriate for SBA's environment.
• Provide technical leadership and oversight for the containerization and orchestration of SBA applications, ensuring container images are properly secured, scanned, and managed in accordance with SBA security requirements and federal guidelines.
• Support the planning and execution of cloud migration and modernization initiatives, applying Dev Sec Ops  principles and practices to accelerate the secure migration of SBA workloads to cloud…