Other Jobs To Apply
No other job posts for this day.
<p><strong>Full-Time | Remote</strong></p>
<h2>About the Role</h2>
<p>We are seeking a skilled DevSecOps Engineer to design, deploy, and maintain secure, cloud-native infrastructure supporting Department of War customers. You will work across container platforms, CI/CD pipelines, and government cloud environments to deliver hardened, compliant software systems at scale. This role sits at the intersection of platform engineering, security, and DevSecOps and requires a strong understanding of DoW policies, toolchains, and accreditation processes.</p>
<h2>Key Responsibilities</h2>
<ul>
<li>
<p>Design and maintain Kubernetes-based infrastructure, including cluster provisioning, RBAC configuration, network policy, and workload management</p>
</li>
<li>
<p>Package and deploy applications using Helm charts; maintain chart repositories and manage release lifecycle across environments</p>
</li>
<li>
<p>Implement and enforce policy controls using Istio service mesh, OPA Gatekeeper, Kyverno, and related Kubernetes admission controllers</p>
</li>
<li>
<p>Build and maintain CI/CD pipelines using GitLab CI, GitHub Actions, Jenkins, or equivalent tooling; integrate automated security scanning and compliance gates</p>
</li>
<li>
<p>Deploy and operate workloads on AWS GovCloud and Azure Government; architect for high availability, disaster recovery, and cross-region compliance requirements</p>
</li>
<li>
<p>Manage and harden container images; integrate with Iron Bank, Platform One, and other DoW-approved registry sources</p>
</li>
<li>
<p>Configure and maintain observability stacks including Prometheus, Grafana, and Datadog; develop alerting, dashboards, and SLO frameworks</p>
</li>
<li>
<p>Participate in ATO processes, support STIG/CIS compliance scanning, and contribute to System Security Plans (SSPs) and documentation artifacts</p>
</li>
<li>
<p>Collaborate with development, security, and program teams to establish and refine DevSecOps practices across the software delivery lifecycle</p>
</li>
<li>
<p>Support air-gapped and classified environment deployments; design solutions for offline image transfer, registry mirroring, and artifact management</p>
</li>
<li>
<p>Coordinate with government platform teams and managed service providers to integrate and sustain vendor tooling within approved DoD software factories</p>
</li>
</ul>
<h2>Required Qualifications</h2>
<ul>
<li>
<p>4+ years of hands-on experience with Kubernetes in production environments</p>
</li>
<li>
<p>Demonstrated experience deploying and managing applications via Helm in multi-environment configurations</p>
</li>
<li>
<p>Working knowledge of Istio, OPA Gatekeeper, Kyverno, or equivalent Kubernetes policy and service mesh tooling</p>
</li>
<li>
<p>Experience with at least one major CI/CD platform: GitLab CI, GitHub Actions, Jenkins, or equivalent</p>
</li>
<li>
<p>Hands-on experience with AWS and/or Azure cloud platforms, including IAM, networking, storage, and managed Kubernetes services (EKS, AKS)</p>
</li>
<li>
<p>Experience with container image workflows: building, scanning, hardening, and distributing images via OCI registries</p>
</li>
<li>
<p>Familiarity with monitoring and observability tools including Prometheus, Grafana, and/or Datadog</p>
</li>
<li>
<p>Experience with Single Sign-On (SSO) and identity federation; familiarity with Keycloak or equivalent OIDC/SAML providers</p>
</li>
<li>
<p>Active DoW security clearance (Secret or higher)</p>
</li>
</ul>
<h2>Preferred Qualifications</h2>
<ul>
<li>
<p>Experience with Iron Bank, Registry1, Platform One, or Big Bang-based software factory environments</p>
</li>
<li>
<p>Familiarity with GitLab Ultimate features including security dashboards and dependency scanning</p>
</li>
<li>
<p>Experience supporting Air Force, Space Force, Navy, or other military branch programs</p>
</li>
<li>
<p>Exposure to software supply chain security tooling: Sigstore/cosign, vulnerability scanners, SBOM generation, and compliance scanning tools</p>
</li>
<li>
<p>Prior work in cATO, continuous authorization, or Ongoing Authorization environments</p>
</li>
<li>
<p>CKA, CKS, AWS GovCloud certifications, or equivalent credentials</p>
</li>
<li>
<p>Experience with AWS GovCloud and/or Azure Government</p>
</li>
<li>
<p>Understanding of DoD compliance frameworks: NIST 800-53, STIGs, RMF, FedRAMP</p>
</li>
</ul>
<h2>Technical Environment</h2>
<p>You will work within a modern DevSecOps stack including some or all of the following:</p>
<p><strong>Container Orchestration</strong></p>
<ul>
<li>
<p>Kubernetes (EKS, AKS, RKE2, OpenShift)</p>
</li>
</ul>
<p><strong>Package Management</strong></p>
<ul>
<li>
<p>Helm, Kustomize</p>
</li>
</ul>
<p><strong>Policy & Mesh</strong></p>
<ul>
<li>
<p>Istio, OPA Gatekeeper, Kyverno, Calico</p>
</li>
</ul>
<p><strong>CI/CD</strong></p>
<ul>
<li>
<p>GitLab CI/CD, GitHub Actions, Jenkins</p>
</li>
</ul>
<p><strong>Cloud</strong></p>
<ul>
<li>
<p>AWS GovCloud (East/West), Azure Government</p>
</li>
</ul>
<p><strong>Registries</strong></p>
<ul>
<li>
<p>Iron Bank / Registry1, Harbor, Quay, AWS ECR</p>
</li>
</ul>
<p><strong>Observability</strong></p>
<ul>
<li>
<p>Prometheus, Grafana, Datadog, Loki, OpenTelemetry</p>
</li>
</ul>
<p><strong>Security Scanning</strong></p>
<ul>
<li>
<p>Trivy, Grype, Anchore, RapidFort, Twistlock/Prisma</p>
</li>
</ul>
<p><strong>IaC</strong></p>
<ul>
<li>
<p>Terraform, Ansible, Crossplane</p>
</li>
</ul>
<h2>Clearance & Compliance</h2>
<p>This position supports U.S. Department of War programs and may require a valid security clearance. Candidates must be U.S. citizens. Applicants are subject to a background investigation in accordance with federal requirements.</p>
<p>We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or veteran status.</p>
<h2>Compensation</h2>
<p>Base Salary: $140,000 – $175,000 + Benefits + Equity: Where applicable</p>
<h2>Advantages</h2>
<p>Experience with container registry management and observability in Kubernetes environments, enabling secure image lifecycle workflows, compliance scanning, and end-to-end system visibility across production platforms.</p>
<h3>Security Clearance Advantage</h3>
<ul>
<li>
<p>Active DoW Security Clearance (Secret or higher) is a strong advantage</p>
</li>
<li>
<p>Clearance eligibility may be required for onboarding or future access</p>
</li>
<li>
<p>Clearance holders may be prioritized for:</p>
<ul>
<li>
<p>Higher-trust workloads</p>
</li>
<li>
<p>Classified / air-gapped systems</p>
</li>
<li>
<p>Expanded DevSecOps responsibilities</p>
</li>
</ul>
</li>
</ul>
<p> </p>
