Cloud Engineer / DevSecOps / CI-CD

Halvik • McLean, VA

8d

About The Position

Halvik Corp is seeking a Cloud Engineer / DevSecOps / CI-CD professional to support the U.S. Department of Transportation (DOT) Office of the Chief Digital & Information Officer (OCDIO) Digital Factory capacity task order. The program operates under DOT's IT Modernization Initiative and the 2025–2029 "Path to 1DOT IT" strategy, delivering secure, resilient, modernized applications through a Software Factory and Capacity-as-a-Service model. The role supports Agile Scrum teams performing Development, Modernization, and Enhancement work across cloud, on-premises, and SaaS platforms within the USDOT IT security boundary.

As a core member of the DME Scrum teams, the engineer implements and maintains secure, automated delivery pipelines from code commit to production. The position provides cloud infrastructure automation, supports DevSecOps toolchains, and oversees releases across development, QA, staging, and production. It helps enable reliable releases, integrates security scanning and automated testing into delivery, and produces audit-ready evidence to support DOT Authority to Operate requirements.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.
• At least 7 years of professional experience in cloud engineering, DevOps/DevSecOps, or systems engineering.
• At least 3 years building and operating CI/CD pipelines for Agile software teams in a Federal Government environment.
• Advanced knowledge of CI/CD platforms, including GitHub Enterprise/GitHub Actions and Azure DevOps, and Git.
• Knowledge of AWS and/or Microsoft Azure.
• Knowledge of infrastructure-as-code tools such as Terraform, CloudFormation, or ARM/Bicep.
• Knowledge of containers and orchestration, including Docker and Kubernetes.
• Scripting ability with PowerShell, Bash, or Python.
• Knowledge of security scanning tools, including SAST, DAST, dependency scanning, and container scanning.
• Must meet U.S. DOT contract requirements, including a favorable Public Trust background investigation and suitability determination.
• Follow secure coding and delivery practices aligned with NIST SP 800-218 (Secure Software Development Framework) and the OWASP Top 10.
• Hold at least one current cloud or DevOps certification, such as AWS Certified DevOps Engineer or Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert or Azure Administrator, or Certified Kubernetes Administrator (CKA).

Nice To Haves

• CompTIA Security+ or an equivalent security certification.
• Experience in Federal Contracting, particularly civilian agency IT modernization or Software Factory programs; prior DOT experience is a plus.
• Familiarity with Agile/Scrum team delivery and FedRAMP-authorized environments such as AWS GovCloud and Azure Government.
• Experience with the NIST Risk Management Framework (NIST SP 800-53), ATO processes, continuous monitoring, and FISMA compliance.
• Experience supporting deployment pipelines for enterprise platforms used at DOT, such as Salesforce, Microsoft Power Platform, ServiceNow, Dynamics 365, Appian, .NET, or Java applications.
• Strong analytical and problem-solving capabilities.

Responsibilities

• Lead design, implementation, and continuous improvement of secure CI/CD pipelines using Government-furnished tools such as GitHub Enterprise and Azure DevOps; build reusable pipeline patterns and delivery standards.
• Manage release orchestration and environment promotion across Development, QA, UAT/Staging, and Production.
• Maintain deployment scripts, rollback procedures, and data-restore paths; validate configuration settings, secrets handling, feature flags, and configuration drift before production releases.
• Coordinate with developers, solutions architects, QA and test automation engineers, the Scrum Master, DOT infrastructure teams, the DOT Security Operations Center, and Federal ISSOs to align sprint work with security requirements and resolve environment and deployment issues.
• Support Digital Factory governance checkpoints, including architecture alignment, security posture reviews, and release readiness.
• Provision and automate cloud infrastructure using infrastructure-as-code, and configure monitoring and automated alerting to track performance, error rates, and security events.
• Embed security scanning and policy enforcement into pipelines, including static and dynamic code analysis, dependency and container scanning, and vulnerability checks aligned to the OWASP Top 10.
• Integrate automated testing into CI/CD using Government-furnished tools, make test results available for sprint demos and release readiness reviews, and support the transition from manual to automated testing.
• Support preparation and maintenance of ATO artifacts, including SSP updates, control implementation evidence, configuration management and scan evidence, and POA&M status inputs.
• Maintain inputs to the Configuration Management Plan, Systems Administration Manual, and IT Contingency Plan.
• Participate in compliance reviews and vulnerability scans; remediate findings with DOT SOC and ISSOs; apply OS patches, library upgrades, and platform updates.
• Keep code, pipelines, and data within the USDOT IT security boundary and inventory contractor-created digital assets for Government turnover.
• Automate data migration and cutover activities for legacy modernization, including dry runs, rollback strategies, audit logging, and least-privilege access controls.

Benefits

• Company-supported medical, dental, vision, life, short-term disability, and long-term disability insurance.
• 11 federal holidays and paid time off.
• Eligible employees may receive performance-based incentives.
• 401(k) with company matching.
• Flexible Spending Accounts for commuter, medical, and dependent care expenses.
• Tuition Assistance.
• Charitable Contribution matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior