DevSecOps Engineer II

Dev Sec Ops  Engineer II

Type Full Time W/Benefits Ret Match

Location :
Location

US-Washington, D.C.

Security Clearance DHS Suitability

• Design, develop, secure, and optimize CI/CD pipelines using industry leading orchestrator tools to enable automated builds, testing, security scanning, and deployments across multiple environments.
• Analyze, remediate, and verify Security Technical Implementation Guide (STIG) findings, working handson with system stakeholders to ensure compliance, security hardening, and alignment with federal cybersecurity standards.
• Architect and implement scalable, reliable, and secure Dev Sec Ops  infrastructure, including version control systems, automated testing frameworks, and continuous monitoring solutions to support endtoend delivery.
• Build and maintain automated deployment and configuration management workflows, leveraging containerization technologies (e.g., Docker, Kubernetes) to ensure consistent, repeatable, and secure deployments.
• Develop, document, and enforce engineering best practices for code quality, secure coding, dependency management, application performance, and compliance with federal regulatory and security requirements.
• Partner closely with cybersecurity teams to integrate continuous security controls into the pipeline, including automated vulnerability scanning, static/dynamic code analysis, dependency checks, and policy enforcement.
• Continuously enhance software development processes and procedures, ensuring alignment with evolving mission needs, technology updates, and federal security mandates.
• Support updates to unit and integration tests, ensuring the test suites and corresponding CI/CD pipelines remain reliable, comprehensive, and aligned with software updates and new feature development.
• Assist in establishing and maintaining application platform environments across development, test, staging, and preproduction, ensuring proper configuration, monitoring, and performance tuning.
• Design, develop, maintain, and secure OCIcompliant container images tailored for Kubernetes environments, ensuring compliance with DoD, DHS, or agency specific container hardening requirements.
• Develop Infrastructure as Code (IaC) (e.g., Terraform, Cloud Formation, Ansible) to provision scalable, secure, cloud based environments and automate infrastructure lifecycle management.
• Support deployment of microservices to cloud or on premises Kubernetes platforms, ensuring resiliency, fault tolerance, advanced networking configuration, and policy based traffic management.
• Contribute to new development and continuous enhancement of existing applications, including security patches, feature development, and defect resolution, following Agile SCRUM ceremonies and workflows.

• Bachelor's degree in Computer Science or a related technical discipline, with 8+ years of progressive, hands-on experience in Dev Ops, Software Engineering, or a closely aligned discipline.
• Demonstrated experience as a Software Developer, Dev Ops Engineer, or similar role, preferably supporting federal agencies or government contracting environments with stringent security and compliance requirements.
• Expertise developing, maintaining, and optimizing CI/CD pipelines, enabling automated build, test, security scanning, and deployment workflows across multi-environment architectures.
• Proven ability to implement, monitor, analyze, remediate, and verify STIG (Security Technical Implementation Guide) findings, ensuring compliance with federal cybersecurity standards.
• Handson experience with container orchestration and container technologies, including Kubernetes, Open Shift, Docker, and Helm charts, supporting mission critical workloads in secure environments.
• Advanced experience with Infrastructure as Code (IaC) and associated testing strategies, particularly using Terraform to provision, scale, and secure cloud and hybrid infrastructure.
• Proficiency with enterprise Dev Ops automation platforms such as Harness, Jenkins, and Git Lab, with a strong understanding of CI/CD best practices, branching strategies, and pipeline governance.
• Experience using SAST tools (e.g., Fortify, Sonar Qube, Xray) to enforce secure coding standards and detect vulnerabilities early in the development lifecycle.
• Experience using DAST tools (e.g., OWASP ZAP) to continuously assess application security posture in dynamic runtime environments.
• Background in Site Reliability Engineering (SRE) practices, including reliability automation,…