DevSecOps Engineer

MAG Aerospace • Fair Lakes, VA

69d

About The Position

MAG is recruiting for a DevSecOps Engineer who will enable rapid, secure delivery of tactical capabilities through world-class automation. You'll build the infrastructure and pipelines that allow a small team to deliver like a large organization while maintaining security in contested environments. This is a Hybrid Position - Remote mainly - but as well on call to come into a MAG office when requested. We are seeking candidates who live in proximity to our corporate HQ in Fairfax, VA primarily but will entertain persons living near our satellite offices in: Aberdeen, MD - Titusville, FL - Newport News, VA - Carthage NC.

Requirements

• 5+ years DevOps/DevSecOps experience
• Expert-level knowledge of CI/CD platforms (Azure DevOps, GitLab CI, Jenkins)
• Experience with artifact repositories (e.g., JFrog Artifactory, Sonatype Nexus, Azure Artifacts, to include Azure Container Registry) for managing diverse package types
• Strong scripting skills (Python, Bash, PowerShell)
• Extensive experience with containerization (Docker, Podman) and orchestration (Kubernetes)
• Proficiency with IaC tools (Terraform, Ansible, Pulumi)
• Experience with cloud platforms (Azure required, AWS/GCP beneficial)
• Understanding of security scanning tools and practices
• Experience with monitoring stacks (Prometheus, Grafana, ELK)
• Knowledge of Git workflows and version control best practices

Nice To Haves

• Experience with embedded system CI/CD and cross-compilation
• Knowledge of military software development processes
• Familiarity with RMF and security authorization processes
• Experience with air-gapped and classified environments
• Understanding of supply chain security and SBOM
• Kubernetes certifications (CKA, CKS)
• Experience with chaos engineering and resilience testing
• Familiarity with Policy-as-Code (PaC) tools like Open Policy Agent (OPA) for automating governance and security checks

Responsibilities

• Design and implement CI/CD pipelines for multi-architecture deployments
• Develop Infrastructure as Code (IaC) for hybrid cloud/edge environments
• Implement container orchestration for resource-constrained platforms
• Create automated testing frameworks (unit, integration, security, performance)
• Build observability solutions (metrics, logging, tracing, profiling)
• Develop GitOps workflows for configuration management
• Optimize build processes for embedded and edge platforms
• Implement security scanning in CI/CD pipelines (SAST, DAST, dependency scanning)
• Automate compliance validation (STIG, RMF controls)
• Design and implement secrets management solutions
• Create security monitoring and incident response automation
• Support security documentation and authorization packages

Benefits

• Work on meaningful problems that directly impact national security
• Small, elite team where your contributions matter immediately
• Access to cutting-edge hardware and technologies
• Rapid prototyping environment - see your ideas deployed in weeks
• Direct interaction with end users and field deployments
• Professional development and conference attendance support
• Flexible work arrangements with occasional field exercises
• Opportunity to shape the future of tactical edge computing

What This Job Offers

• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees