DevSecOps Engineer IV

Responsibilities

Noblis is seeking a highly skilled and motivated DevSecOps Engineer IV with an active Top Secret/SCI with Polygraph clearance to join our security team. You will be responsible for integrating security seamlessly into our software development life cycle (SDLC), driving the "shift-left" security approach, and ensuring our cloud-native applications are secure by design. This hands-on role involves building secure CI/CD pipelines, automating security controls, managing Kubernetes security, and mentoring junior engineers.

Job Responsibilities:

• Design, build, and maintain automated CI/CD pipelines (GitLab CI/CD, GitHub Actions) that incorporate security testing tools at every stage.
• Develop and manage infrastructure using Terraform or CloudFormation, implementing security guardrails and scanning to ensure compliance and prevent misconfigurations.
• Implement security best practices for Docker, Kubernetes, and EKS, including image hardening, admission controls, policy-as-code and runtime security.
• Partner with teams to design and enforce AWS/Azure security guardrails, including IAM least-privilege, network controls, and encryption standards.
• Operationalize vulnerability management by identifying, prioritizing, and remediating security threats across applications and infrastructure.
• Translate security compliance requirements into automated security controls and audit-ready evidence.
• Act as a security champion, mentoring junior engineers and developers on secure coding practices and DevSecOps principles.

Required Qualifications

• Clearance: Active Top Secret SCI (TS/SCI) with Polygraph
• Citizenship: U.S. Citizenship is required.
• Education: Bachelor's degree in Computer Science, Information Security, or related technical field.
• Experience: 15+ years of experience in DevOps, SRE, or Platform Engineering, with at least 5 years focused on DevSecOps and cloud-native security.
• Cloud Platforms: Deep hands-on experience securing AWS or Azure environments (IAM, KMS, Networking, logging).
• CI/CD & Automation: Proficiency in building CI/CD pipelines (GitLab) and automating tasks with Python, Bash.
• Containers/Orchestration: Strong expertise in Docker and Kubernetes/EKS security.
• Security Tools: Hands-on experience with security scanning tools.

Desired Qualifications

• Certified Information Systems Security Professional (CISSP), AWS Certified DevOps Engineer - Professional, Certified Kubernetes Security Specialist (CKS), or CCSP.
• Experience with OPA/Gatekeeper or Kyverno.
• Knowledge of SBOM generation, artifact signing (cosign), and provenance concepts.
• Familiarity with NIST SP 800-171 or CMMC expectations.
• Strong analytical skills to diagnose complex security issues spanning multiple technologies.
• Ability to distill technical complexities into actionable guidance for development teams.
• Passion for automating everything and a mindset of continuous improvement.

Overview

Noblis and our wholly owned subsidiaries, Noblis ESI, and Noblis MSD tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us

Why work at a Noblis company?

Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards. Noblis maintains a drug-free workplace.

*Remote/hybrid status is subject to change based on Noblis and/or government requirements

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.

If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.

EEO is the Law | E-Verify | Right to Work

Total Rewards

At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.

Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis' total compensation package.

Posted Salary Range

USD $146,200.00 - USD $228,400.00 /Yr.