Security clearance: Ability to obtain and maintain a DoD Secret security clearance required
Help shape the future of secure software delivery across the enterprise.
If you enjoy solving complex engineering problems, building automation that makes a difference, and turning security requirements into practical technical solutions, this role offers an opportunity to make a meaningful impact.
We are seeking an experienced DevSecOps Engineer to help advance how software is built, secured, tested, and delivered across complex, mission-focused environments. Based in our Reston, VA office, this is an opportunity to apply your engineering expertise to meaningful challenges at the intersection of software development, cybersecurity, automation, and platform engineering.
This is a hands-on engineering position for someone who understands that security should be built into the software delivery lifecycle—not bolted on at the end. You will help design and implement secure CI/CD pipelines, strengthen software supply-chain integrity, automate security and quality controls, and establish repeatable deployment practices that enable development teams to move faster without compromising security or reliability.
Working closely with software developers, cybersecurity professionals, platform engineers, systems engineers, and program teams, you will have an opportunity to influence enterprise engineering practices and make secure software delivery more efficient, consistent, and scalable.
Our environment includes Azure DevOps Server, Nexus, SonarQube, and Kubernetes/K3s deployment workflows. You will help connect these technologies into cohesive, automated delivery pipelines that support development, integration, testing, staging, and production environments.
What You’ll Do
Engineer Secure CI/CD Pipelines
- Design, build, and continuously improve secure CI/CD pipelines using Azure DevOps, including reusable YAML templates, automated quality gates, artifact controls, and release safeguards.
- Develop standardized build and release patterns that promote consistency, repeatability, and security across development, test, integration, staging, and production environments.
- Troubleshoot complex pipeline failures, build and dependency issues, permissions challenges, security scan failures, and deployment blockers.
- Identify opportunities to reduce manual processes, eliminate recurring delivery issues, and improve the reliability and efficiency of software releases.
Strengthen Software Supply-Chain Security
- Embed security and software quality controls directly into development and release workflows, including SAST, SCA, dependency scanning, secrets detection, container scanning, code-quality gates, and artifact validation.
- Implement and support software artifact and code-quality management capabilities using platforms such as Nexus, SonarQube, and Azure DevOps artifacts.
- Help improve software supply-chain integrity through automated security checks, dependency visibility, artifact governance, and secure release practices.
- Partner with cybersecurity teams to translate security requirements into practical engineering controls aligned with SSP, RMF, NIST, CMMC, STIG, Zero Trust, audit, and program requirements.
Enable Secure Kubernetes Deployments
- Collaborate with platform engineering teams to establish and implement secure Kubernetes/K3s deployment standards and guardrails.
- Support security configurations involving namespaces, RBAC, ServiceAccounts, Helm, ingress, TLS, storage, resource quotas, and workload security.
- Help standardize deployment patterns and automate security practices across containerized application environments.
- Develop technical documentation, reusable examples, runbooks, and onboarding materials that help development teams adopt secure pipeline and deployment practices.
Drive Engineering Excellence and Developer Enablement
- Work directly with development and engineering teams to identify and resolve friction points in software delivery.
- Monitor pipeline health, security scan outcomes, recurring release blockers, and control gaps.
- Turn lessons learned and recurring technical challenges into automation, reusable templates, improved tooling, and more effective engineering standards.
- Promote a collaborative DevSecOps culture that makes secure software delivery an integral part of how teams engineer and deploy software.
What You Bring
We are looking for an engineer who combines strong DevOps fundamentals with practical security knowledge, automation skills, and the ability to work across diverse technical teams.
Required Qualifications
- 5+ years of experience in DevOps, DevSecOps, platform engineering, software delivery, systems engineering, or a closely related technical discipline.
- Hands-on experience developing, managing, or improving Azure DevOps pipelines, including YAML, build and release workflows, repositories, artifacts, permissions, or agent-based builds.
- Demonstrated experience integrating security, quality, or compliance controls into CI/CD pipelines.
- Practical knowledge of secure software delivery practices, including SAST, SCA, dependency scanning, secrets management, code-quality gates, artifact controls, or container scanning.
- Experience diagnosing and resolving CI/CD pipeline failures, build issues, deployment problems, permissions challenges, and dependency-related errors.
- Working experience with Kubernetes, K3s, containers, Helm, or comparable container orchestration and deployment technologies.
- Scripting and automation experience using PowerShell, Bash, Python, or similar languages.
- Ability to communicate complex technical concepts clearly and develop effective technical documentation, runbooks, onboarding guides, and troubleshooting procedures.
- Ability to obtain and maintain a U.S. security clearance.
- Willingness and ability to work in regulated, secure, and compliance-driven technical environments.
What Sets You Apart
The following experience is highly desirable:
- Active U.S. security clearance.
- Experience working with Azure DevOps Server in enterprise or secure environments.
- Experience integrating, configuring, or administering Nexus, SonarQube, or comparable artifact-management and code-quality platforms.
- Familiarity with software supply-chain security practices, including SBOM generation, SCA, container scanning, artifact signing, and software provenance.
- Experience implementing policy-as-code, OPA/Gatekeeper, Kubernetes admission controls, or secure workload policies.
- Infrastructure-as-Code or Configuration-as-Code experience using Terraform, Ansible, Bicep, CloudFormation, or similar technologies.
- Experience with observability and monitoring platforms such as Prometheus, Grafana, and Loki.
- Background supporting defense, federal government, or other mission-critical programs operating under NIST 800-171, CMMC, RMF, STIG, or similar security frameworks.
