2. DevSecOps Engineer — Key Personnel
Labor Category: DevSecOps Engineer
Clearance: U.S. Citizen with active SECRET clearance (required).
Position Summary
Design, automate, and secure the CI/CD pipelines, cloud infrastructure, and RMF compliance for a FedRAMP High / DoD Impact Level 5 (IL5) data and analytics platform. Embeds security automation across the DevOps lifecycle under an ''Automation-First'' mandate.
A. Minimum Qualifications (resume must demonstrate)
● Five (5) years in DevSecOps: designing, implementing, and maintaining CI/CD pipelines and automating deployment (Jenkins, GitLab CI/CD, Ansible).
● Five (5) years supporting the RMF process for DoD/federal systems: applying DISA STIGs, vulnerability assessments, and patching/remediation.
● Five (5) years automating cloud infrastructure/platform provisioning (AWS, Azure) using Infrastructure as Code (Terraform, CloudFormation).
● Experience integrating security automation, vulnerability scanning (Nessus, OpenSCAP), and monitoring/logging (Splunk, ELK) into the DevOps lifecycle.
● Verifiable experience with containerization/orchestration (Docker, Kubernetes) in a microservices architecture.
● Verifiable experience integrating automated security testing (SAST and DAST) directly into the CI/CD pipeline.
B. On-Contract Responsibilities (from PWS Task Areas)
● Automate infrastructure and workflows using IaC (Terraform, Ansible); build and manage CI/CD pipelines for secure deployment; develop streaming data pipelines (Apache Kafka, AWS Kinesis) for real-time processing.
● Deliver all activities and evidence to achieve and maintain a full Authority to Operate (ATO) under RMF — System Security Plan, Security Assessment Report, POA&M — and support control assessments and continuous monitoring.
● Implement Compliance-as-Code: automate DISA STIG application/verification across all infrastructure layers; auto-generate RMF artifacts (PPSM, topology diagrams) from IaC repos so eMASS reflects the true environment; integrate zero-touch automated vulnerability scanning into CI/CD.
● Operate within a FedRAMP High / DoD IL5 cloud (AWS GovCloud, Azure Government), ensuring all AI/ML processing stays inside the accredited boundary (no CUI to public commercial AI endpoints).
● Use IaC to dynamically provision/de-provision GPU-accelerated compute clusters to control costs, supporting the MLOps lifecycle.
● Perform continuous security compliance for baseline components — software patching and STIG/vulnerability remediation — with zero degradation to legacy capabilities during modernization.
.png?format=webp)
Never miss an opportunity! Create an alert based on the job you applied for.