Cloud Engineer / DevSecOps / CI-CD

Halvik • McLean, IL

23h • $145 - $170

About The Position

Halvik is seeking a Cloud Engineer / DevSecOps / CI-CD professional to support the U.S. Department of Transportation (DOT) Office of the Chief Digital & Information Officer (OCDIO) Digital Factory capacity task order. Under DOT's IT Modernization Initiative and its 2025–2029 "Path to 1DOT IT" strategy, the program delivers secure, resilient, modernized applications through a Software Factory and Capacity-as-a-Service model. The work spans cloud, on-premises, and SaaS platforms within the USDOT IT security boundary.

As a member of Halvik's Development, Modernization, and Enhancement Scrum teams, this role implements and maintains secure, automated pipelines that move code from commit to production. The engineer automates cloud infrastructure, supports DevSecOps toolchains, and coordinates releases across development, QA, staging, and production. The position supports reliable releases, integrates security scanning and automated testing into delivery, and helps produce audit-ready evidence required to maintain Authority to Operate (ATO).

The role works with Government-furnished tools and coordinates with developers, architects, QA and test automation engineers, DOT infrastructure teams, the DOT Security Operations Center, and Federal ISSOs. It also supports vulnerability remediation, compliance activities, technical documentation, asset inventory, and migration and cutover work.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.
• At least 7 years of professional experience in cloud engineering, DevOps/DevSecOps, or systems engineering.
• At least 3 years building and operating CI/CD pipelines for Agile software teams in a Federal Government environment.
• Advanced knowledge of CI/CD platforms such as GitHub Enterprise/GitHub Actions and Azure DevOps, and of Git.
• Advanced knowledge of AWS and/or Microsoft Azure.
• Experience with infrastructure-as-code tools such as Terraform, CloudFormation, or ARM/Bicep.
• Experience with containers and orchestration, including Docker and Kubernetes.
• Scripting proficiency in PowerShell, Bash, or Python.
• Knowledge of security scanning tools, including SAST, DAST, dependency scanning, and container scanning.
• Must meet U.S. DOT contract requirements, including a favorable Public Trust background investigation and suitability determination.
• Must follow secure coding and delivery practices aligned with NIST SP 800-218 and the OWASP Top 10.
• At least one current cloud or DevOps certification, such as AWS Certified DevOps Engineer or Solutions Architect, Microsoft Certified: Azure DevOps Engineer Expert or Azure Administrator, or Certified Kubernetes Administrator (CKA).

Nice To Haves

• CompTIA Security+ or an equivalent security certification.
• Demonstrated Federal contracting experience, particularly with civilian agency IT modernization or Software Factory programs; prior DOT experience is a plus.
• Familiarity with Agile/Scrum delivery and FedRAMP-authorized environments such as AWS GovCloud and Azure Government.
• Experience with the NIST Risk Management Framework (NIST SP 800-53), ATO processes, continuous monitoring, and FISMA compliance.
• Experience supporting deployment pipelines for enterprise platforms used at DOT, such as Salesforce, Microsoft Power Platform, ServiceNow, Dynamics 365, Appian, .NET, or Java applications.
• Strong analytical and problem-solving capabilities.

Responsibilities

• Design, implement, and continuously improve secure CI/CD pipelines using Government-furnished tools such as GitHub Enterprise and Azure DevOps; create reusable pipeline patterns and delivery standards.
• Manage release orchestration and environment promotion across Development, QA, UAT/Staging, and Production.
• Maintain deployment scripts, rollback procedures, and data-restore paths; validate configuration settings, secrets handling, feature flags, and configuration drift before production releases.
• Coordinate with developers, solutions architects, QA and test automation engineers, the Scrum Master, DOT infrastructure teams, the DOT Security Operations Center, and Federal ISSOs to align sprint work with security requirements and resolve environment and deployment issues.
• Support Digital Factory governance checkpoints, including architecture alignment, security posture reviews, and release readiness.
• Provision and automate cloud infrastructure using infrastructure-as-code, including in AWS GovCloud or Microsoft Azure Government.
• Configure monitoring and automated alerting using tools such as AWS CloudWatch, Azure Monitor, or Splunk to track performance, error rates, and security events and support rapid response to outages or anomalies.
• Embed security scanning and policy enforcement in pipelines, including static and dynamic code analysis, dependency and container scanning, and vulnerability checks aligned to the OWASP Top 10.
• Integrate automated testing into CI/CD using Government-furnished tools, currently ClicTest; make results available for sprint demos and release readiness reviews and support the transition from manual to automated testing.
• Support preparation and maintenance of ATO artifacts, including SSP updates, control implementation evidence, configuration management and scan evidence, and POA&M status inputs.
• Maintain inputs to the Configuration Management Plan, Systems Administration Manual, and IT Contingency Plan.
• Participate in compliance reviews and vulnerability scans; remediate findings with DOT SOC and ISSOs and apply OS patches, library upgrades, and platform updates.
• Keep code, pipelines, and data within the USDOT IT security boundary and inventory contractor-created digital assets for Government turnover.
• Automate data migration and cutover activities for legacy modernization, including dry runs, rollback strategies, audit logging, and least-privilege access controls.

Benefits

• Company-supported medical, dental, vision, life, short-term disability, and long-term disability insurance.
• 11 federal holidays and PTO.
• Eligible employees may receive performance-based incentives.
• 401(k) with company matching.
• Flexible Spending Accounts for commuter, medical, and dependent care expenses.
• Tuition Assistance.
• Charitable Contribution matching.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior