DevSecOps Engineer

1 day ago


Arlington, United States Innovative Defense Technologies Full time
Background Information: Innovative Defense Technologies (IDT), provider of automated software testing, data analysis, and cybersecurity solutions for complex, mission-critical systems for the US Department of Defense (DOD) and commercial customers, is seeking a DevSecOps Engineer to be based in our Arlington, VA office. This individual will work with senior leadership and a fast-paced team of mission-focused engineers to solve some of our customers toughest challenges. Initiative, creativity, reliability, and efficient teamwork will be required to successfully deliver innovative solutions in this dynamic customer space. Overview: At IDT, we are committed to delivering cutting-edge defense solutions that protect and empower our nation's security. As a leading provider of advanced technologies, we strive to stay ahead in an ever-changing landscape. We are seeking a skilled and driven DevSecOps (Development, Security, and Operations) Engineer to join our dynamic team and ensure the highest level of security and efficiency in our software products development and deployment processes. This job requires a unique blend of skills from development, security, and operations domains. The successful candidate will contribute to building a high-quality and innovative Secured Software Supply Chain (S3C) that provides IDT engineering teams with the tools and environments that foster innovation for our customers by reducing the friction in building and testing our software products and enabling feedback throughout the software development life cycle. As a member of the IDT DevSecOps team, you will engage in various tasks throughout the year. Objective Key Results (OKRs) are planned out for the year, with the focus being on improving areas like stability of the S3C and reducing/removing constraints for engineers in producing secure, quality products. Ad-hoc tasks come in ranging from a need to shift OKR priorities due to critical business needs, to recovering from a server power failure. All DevSecOps teammates contribute to the overarching goals while bringing specific areas of expertise to the team. All applicants must currently possess an active U.S. Security Clearance. Responsibilities Include: Infrastructure as Code (IaC): Develop and maintain automation for provisioning and updating the S3C stack and Kubernetes based deployments. Security Automation: Develop and maintain automated security testing processes, including static code analysis, static application security testing (SAST), software composition analysis (SCA), and security scanning for containers and infrastructure. CI/CD Pipeline Security: Integrate security checks at various stages of the CI/CD pipelines to ensure that security assessments are performed automatically during code build, testing, and deployment. Infrastructure Security: Implement security controls and best practices for cloud infrastructure, virtual machines, and container environments to safeguard against unauthorized access and data breaches in the S3C. Vulnerability Management: Identify, prioritize, and remediate security vulnerabilities across the development and testing environments. This includes coordinating with developers and operations teams to address critical issues promptly. Security Compliance: Work with our internal Cyber/Compliance/SECOPs groups to ensure that software and infrastructure meet relevant security compliance standards and regulations, such as DISA STIGs. Identity and Access Management (IAM): Manage access controls and permissions for users and applications, employing principles like least privilege and role-based access control (RBAC). Collaboration and Communication: Work closely with development, security, and operations teams to foster a culture of collaboration and shared responsibility for security. Continuous Improvement: Continuously evaluate and enhance our DevSecOps practices, tools, and processes to adapt to evolving security threats and industry best practices. Minimum Required Qualifications: Minimum 5 years experience in DevOps/DevSecOps or full stack software development and test B.S. in a software engineering field Required Skills: Experience with containerization technologies like podman and Docker Experience with virtualization (hypervisor) environments such as VMware Experience with Linux and Windows Experience in software development processes, version control systems (e.g., Git), and have experience in coding and scripting languages such as Python, Ruby, JavaScript, Shell scripting, etc. Experience working with software development tools such as Jenkins, Maven, Gradle, Nexus, etc. Working knowledge of Dev[Sec]Ops and CI/CD practices Familiarity with Infrastructure as Code (IaC) and automation tools such as Ansible or Puppet Familiarity with various security concepts, vulnerabilities, and best practices Ability to travel approximately 10% Preferred Skills: Experience in DevSecOps and CI/CD Experience with Infrastructure as Code (IaC) and automation software such as Ansible or Puppet Experience with security testing tools such as SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and other vulnerability scanning tools Familiarity with container orchestration platforms like Kubernetes Familiarity with common security threats and how to mitigate them, as well as be familiar with security frameworks and standards like OWASP and NIST Familiarity with industry-specific security compliance standards and regulations, such as DISA. Familiarity with network security concepts, firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS) Knowledge of authentication mechanisms (e.g., OAuth, SAML) and authorization protocols (e.g., RBAC, ABAC). Competencies: Excellent communication skills and the ability to work effectively in a collaborative, fast-paced, and mission-driven environment Excellent problem-solving skills and the ability to think critically about security risks A willingness to adapt to new technologies and stay up to date with the latest security trends and best practices Be capable of working independently, but thrive in a team environment EEO Statement: IDT is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, protected Veteran status, or any other basis protected by federal, state, or local law. J-18808-Ljbffr

by Jobble


  • DevSecOps Engineer

    7 days ago


    Arlington, United States RIT Solutions, Inc. Full time

    Local candidates only- must send documentation with name/address Candidate MUST be open to onsite interview as final interview Vendor Call Notes: DevSecOps Engineer, involved in integration apps to CI pipelines that build and deploy apps, they do security Set of security testing tools and integrate to pipeline, integrate whole process, fixing issues,...


  • Arlington, United States SAIC Full time

    Description SAIC is seeking a proven Senior DevSecOps Cloud Engineer to join the Enterprise Cloud Management Agency (ECMA) Cloud Enterprise Technology Services (CETS) program and the opportunity to evaluate and potentially re-invent how the Army delivers IT services and make use of data and analytics to meet mission requirements. The CETS program provides...

  • DevSecOps engineer

    1 week ago


    Arlington, United States Zealogics Full time

    What You'll Do: - Collaborate with a team of engineers to implement  client specific security policies in the CI/CD security tools including but not limited to SAST, DAST and SCA applications. - Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevOps processes. - Define the...


  • Arlington, United States Unavailable Full time

    Overview Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and...


  • Arlington, United States Systems Planning and Analysis Full time

    Overview Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in...


  • Arlington, Virginia, United States Systems Planning and Analysis Full time

    At Systems Planning and Analysis, we deliver high-impact technical solutions to complex national security challenges. Our team of experts is highly collaborative and produces results that matter.The Joint Office of the Secretary of Defense, Interagency Division provides expert support services to various customers across the Department of Defense, Federal...


  • Arlington, United States ArdentMC Full time

    Why do you need to choose between doing important work and having a fulfilling life? At Ardent, we have both. Ardent employees are committed to solving our customer's most difficult problems and we are committed to the well-being, personal goals, and professional development of our employee. We are All In. We put forth our strongest effort possible to get...


  • Arlington, Virginia, United States Bloomberg Industry Group Full time

    Bloomberg Industry Group is a leading provider of innovative solutions for the financial industry.About UsWe are committed to delivering high-quality products and services that meet the evolving needs of our clients.Job DescriptionThe estimated salary for this position is $120,000 - $180,000 per year, based on industry standards and location. This figure may...


  • Arlington, United States Glocomms Full time

    Please note that this role is Hybrid and will require 3 days per week onsiteGlocomms is partnered with a leading consumer-focused data analytics and online marketplace company that’s reshaping how millions of users engage with real estate. Security is paramount to this mission, and the organization is seeking innovative professionals to integrate security...

  • AL/ML Engineer

    4 weeks ago


    Arlington, United States Core4ce Full time

    Job Description Core4ce is looking for AI/ML Engineers to join our team supporting the CDAO effort which is responsible for the acceleration of the DoD's adoption of data, analytics, and AI to generate decision advantage from the boardroom to the battlefield. The CDAO is the lead for all AI work within the DoD. Responsibilities • Designs and develops...

  • AL/ML Engineer

    3 weeks ago


    Arlington, United States Core4ce Full time

    Job Description Core4ce is looking for AI/ML Engineers to join our team supporting the CDAO effort which is responsible for the acceleration of the DoD's adoption of data, analytics, and AI to generate decision advantage from the boardroom to the battlefield. The CDAO is the lead for all AI work within the DoD. Responsibilities • Designs and develops...


  • Arlington, Virginia, United States Three Saints Bay Full time

    Job Title: Technical Systems EngineerEstimated Salary: $145,000 - $180,000 per yearAt Three Saints Bay, LLC, we are seeking a highly skilled Technical Systems Engineer to join our team in Crystal City, VA.About the Position:As a Technical Systems Engineer, you will provide systems engineering support for design, development, production, and in-service...

  • Senior AI/ML Engineer

    4 weeks ago


    Arlington, United States Core4ce Full time

    Job Description Core4ce is looking for Senior AI/ML Engineers to join our team supporting the CDAO effort which is responsible for the acceleration of the DoD's adoption of data, analytics, and AI to generate decision advantage from the boardroom to the battlefield. The CDAO is the lead for all AI work within the DoD. Responsibilities • Designs and...

  • Senior AI/ML Engineer

    3 weeks ago


    Arlington, United States Core4ce Full time

    Job Description Core4ce is looking for Senior AI/ML Engineers to join our team supporting the CDAO effort which is responsible for the acceleration of the DoD's adoption of data, analytics, and AI to generate decision advantage from the boardroom to the battlefield. The CDAO is the lead for all AI work within the DoD. Responsibilities • Designs and...


  • Arlington, United States RMAS Full time

    Job DescriptionSr. DevOps/Cloud Solutions Engineer (Kubernetes & Helm)Location: Arlington, VA - Hybrid (2-3 Days/Week)Clearance Requirement: Active Secret We are seeking a DevOps Engineer with 10+ years of experience in Kubernetes and Helm. Familiarity in Big Bang and Crossplane is preferred. Candidates should possess a developer-first mindset, and have the...


  • Arlington, United States RMAS Full time

    Job DescriptionSr. DevOps/Cloud Solutions Engineer (Kubernetes & Helm)Location: Arlington, VA - Hybrid (2-3 Days/Week)Clearance Requirement: Active Secret We are seeking a DevOps Engineer with 10+ years of experience in Kubernetes and Helm. Familiarity in Big Bang and Crossplane is preferred. Candidates should possess a developer-first mindset, and have the...


  • Arlington, United States RMAS Full time

    Job DescriptionSr. DevOps/Cloud Solutions Engineer (Kubernetes & Helm)Location: Arlington, VA - Hybrid (2-3 Days/Week)Clearance Requirement: Active Secret We are seeking a DevOps Engineer with 10+ years of experience in Kubernetes and Helm. Familiarity in Big Bang and Crossplane is preferred. Candidates should possess a developer-first mindset, and have the...


  • Arlington, Virginia, United States IMAGINEEER LLC Full time

    Job DescriptionWe are seeking a highly skilled Software Migration Engineer to lead our team in migrating a custom-built application to a commercial off-the-shelf solution. As an IT Lead, you will be responsible for directing Agile teams, structuring migration plans, and ensuring a seamless transition to the new platform.About This Role:An active Secret...

  • AWS cloud Engineer

    4 weeks ago


    Arlington, United States TechnoGen Full time

    Job Title: Cloud Security Engineer Location: Maryland/Arlington, VA Duration: Contract Overview- As a Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, and monitoring secure cloud architectures for cloud migration, cloud optimization and cloud deployment. We are looking for...

  • Full Stack Engineer

    5 days ago


    Arlington, United States Donatech Full time

    Position would require the candidate to be a W2 employee of Donatech. US Citizenship Required. Basic Qualifications: - Minimum 3 to 5 years of Software Development experience including proficiency in full-stack web development (frontend, backend, database, APIs and other service types). - US Citizenship is required for this role - Experience in...